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Linux Group: 
Adherence To 
Standards Base 
Is Critical Issue 

BY ALEX HANDY 

When writing a program, a few 
questions must be answered first: 
What language will be used? With 
what supporting libraries? What 
operating system will the program 
run on? 

That last question is usually 
the easy one, provided you're 
writing for Windows, Mac OS X 
or even Solaris. But for Linux 
developers, the choice of operat- 
ing systems further fragments 
into a choice among Debian, 
Gentoo, Bed Hat, SUSE, Ubun- 
tu or yet another of the many 
Linux distributions and their 
desktop environments. In June, 
at the Linux Foundation Col- 
laboration Summit, this fragmen- 
tation sparked much discussion. 

The newly formed Linux 
Foundation has been working 
on a solution to this issue since 
its inception in January. The 
goal of the Linux Standards 
Base (LSB) is to remove the 
many small irritations that hin- 
der application development on 
the open source platform. The 
project's immediate objective is 
to provide a single target for all 
Linux application development 
through the creation of common 
APIs, GUI deployment tools 
and better printing support. 
Although today Linux develop- 
ers have to choose between the 
KDE and Gnome desktop envi- 
ronments, Linux Standards Base 
continued on page 18 ► 



HP Spies a Security Deal 

Plans to acquire SPI Dynamics as security pushes into life cycle 




Although more acquisitions are 
expected, Rende said that HP isn't 
looking to become a security vendor. 



BY DAVID WORTHINGTON 

Hewlett-Packard has signed a 
definitive agreement to acquire 
SPI Dynamics, a long-standing 
partner that produces Web 
application security assessment 
software and services. In doing 
so, HP and IBM — which 
acquired Watchfire last month — 
have thrown a one-two punch at 
competitors that have yet to 
incorporate application security 
testing into their enterprise 
development tools. 

The financial terms of the 
agreement, announced June 19, 
were not publicly disclosed. It is 
expected to be complete in the 
third quarter of this year, subject 
to closing conditions. SPI 



Dynamics will then be absorbed 
into HP's Technology Solutions 
Group. 

Derek Brink, vice president 
and research director for IT 
security at Aberdeen Group, 
remarked that HP's acquisition 
of SPI Dynamics appears to be a 
direct competitive response to 
IBM, although HP denied being 
pressured into buying SPI. IBM 
began the consolidation in the 
software security space with the 
announcement at its Bational 
Software Development Confer- 
ence in June that it was acquiring 
Watchfire, which sells security 
assessment software. 

Jonathan Bende, vice presi- 
dent of products for the Quality 



Management Software Group at 
HP, said that the companies had 
been talking about how to join 
forces more effectively for sever- 
al months. "IBM happened to 
announce before us," Bende said 
during a conference call with 
media and analysts. Bende insin- 
uated that HP would continue to 
be acquisitive in the security 
space. 

Aberdeen's Brink speculated, 
"This [acquisition] presumably 
creates a market expectation that 
Microsoft, Oracle and Borland 
will also need to shore up the 
hole in their applications security 
testing. One potential target is 
Cenzic [which] has previously 
continued on page 35 ► 



C++ Revision Gathers Steam for '09 



BY P.J. CONNOLLY 

The C++ programming language 
has a rich history, but it's been 
almost a decade since the last 
significant changes were made to 
it. At the risk of stating the obvi- 
ous, a few things have happened 
in computing since November 
1997, when the C ++98 stan- 
dard— ISO/IEC 14882 to be pre- 
cise — was frozen. 

But Working Group 21 — the 
ISO/IEC C++ standards com- 
mittee — hasn't been idle, even 
though the only tweaks to C++ in 
the intervening years have come 
in the form of a 2003 technical 
corrigendum, a sort of patch 
release. In 2005, the workgroup 
published a draft of a report on 
desired extensions to the C+ + 




C++ creator Bjarne Stroustrup 

standard library, Technical 
Beport 1. TBI, as it's known, is 
the first of at least two reports on 
the subject; much of the materi- 
al in this first report will be 
incorporated into the next ver- 
sion of the C + + standard, 
referred to for now as C++0x. 

The document updating C++ 
is due for ratification by the ISO 



member states in 2008, and upon 
introduction the next year, the 
new version will likely be referred 
to as C+ +09. 

An overriding concern is to 
maintain compatibility with 
C++98, and wherever possible 
with C, making sure that "we 
don't actually go and break code 
in large amounts," noted C+ + 
creator Bjarne Stroustrup. "We 
can't just do the best in the 
abstract; it has to be the best for 
the community, both the imple- 
menters and the users." 

Another architecturally con- 
servative decision is seen in the 
preference of using the standard 
library to add features, instead of 
bolting functionality onto the core 
continued on page 35 ► 
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IBM Research Makes Real-Time Fly 



BY DAVID WORTHINGTON 

What do you call a helicopter 
that is controlled by Java? A Javi- 
ator Just a few years ago, it 
would have been unthinkable to 
expect predictable response 
times from Java. But conven- 
tional wisdom be damned: 
Advances in garbage collection 
have provided the performance 
Java needed to take off and pow- 
er critical real-time applications. 

Researchers at the Haw- 
thorne, N.Y., campus of IBM's 
Thomas J. Watson Research 
Center are attempting to parlay 
Java's success in the enterprise 
to success in real-time systems, 
by whittling latency down to 
sub-milliseconds. In doing so, 
IBM made it possible to provide 
select customers outside of the 
lab with an absolute worst-case 
latency guarantee. 

IBM Research staff member 
David Bacon leads the Metro- 
nome project, coordinating the 
company's real-time Java devel- 
opment efforts. The ongoing 
research includes garbage col- 
lection improvements, special- 
ized programming models, the 
TuningFork system for visual- 
ization and analysis of real-time 
systems, and the development 
of real-time applications built 
from Metronome technologies. 

In a private demonstration 
of Metronome, Bacon sent syn- 




The Javiator helicopter is controlled by IBM's real-time JVM. Pictured 
from left: Rainer Trumme, Josh Auerbach, David Bacon, Harald Rock and 
Christoph Kirsch. 



thesized music from a key- 
board directly to speakers, 
using a Java application called 
Harmonicon. JVMs from IBM 
and Sun Microsystems were 
swapped to contrast garbage 
collection performance. Sun's 
standard JVM was set with 
50ms buffering, which covered 
the latency, but with a marked 
delay between the key press 
and playback. When the buffer 
was set to 2ms, the latency was 
obvious; the garbage collection 
distorted the sound enough to 
make an audiophile retch. 

IBM's JVM was then used, 
set with 2ms buffering. The 



synthesized in real 
playback sounded 



music was 
time and 
flawless. 

The IBM researchers were 
not using Sun Real-Time Sys- 
tem (RTS) 2.0, which was 
unveiled at the JavaOne confer- 
ence in May. RTS 2.0 included 
improvements to Sun's real- 
time garbage collector. 

In large part, the improved 
performance of the IBM JVM 
is credited to a decision to move 
the garbage collection work 
into a separate thread, making 
it possible to control exactly 
when garbage collection runs. 
Running garbage collection in 



the same thread as the applica- 
tion is "stop-the-world collec- 
tion," which degrades perfor- 
mance and runs at times that 
are inconvenient for the appli- 
cation, said Bacon. 

IBM's real-time JVM imple- 
ments the Real Time Specifica- 
tion for Java (RTS J, also known 
as JSR 001) as well as IBM's 
Ahead-of-Time compilation and 
linking technology. 

Metronome's garbage collec- 
tion also uses a high-perfor- 
mance read barrier to reduce 
CPU overhead, and Arraylets, a 
technique for efficiently break- 
ing up large arrays into smaller 
objects. Bacon claimed that IBM 
was able to run a system con- 
tracted to Raytheon Company — 
under a service-level agree- 
ment — for over a week, and 
garbage collection never exceed- 
ed more than 2ms of latency. 

Other vendors have not 
been able to match IBM's real- 
time Java performance. BE A 
Systems, on its Web site, speci- 
fies that the pause time of 
JRockit — a part of BE As 
WebLogic Real Time — will not 
exceed 30ms during any sliding 
window of 50ms, 99 percent of 
the time on a weekly basis. 

According to Sun's Web site, 
its RTS reference platform 
shows that latencies for period- 
ic, no-heap real-time threads 



running on a dedicated proces- 
sor are as low as 15 microsec- 
onds, plus or minus 5ms. 

IBM first shipped real-time 
garbage collection with Web- 
Sphere Real Time in August 
2006. The next generation of 
Metronome will continue to 
push down the worst-case 
latency and scale to larger sys- 
tems, said Bacon. IBM is devel- 
oping middleware on top of 
Metronome to customize it for 
industries, with the ultimate 
goal of pushing real-time Java 
into the mainstream. 

Some real-time applications 
IBM has developed in the 
Hawthorne lab include the Har- 
monicon MIDI synthesizer and 
the Javiator autonomous heli- 
copter. TuningFork visualizes 
real-time events from the Metro- 
nome virtual machine and tools, 
for quantitative exploration of 
data. It is built on Eclipse, with a 
modularized architecture that 
can plug in analysis modules, 
new trace formats and visualiza- 
tions. A sequence of Harmoni- 
con playback demonstrated 
TuningFork's capabilities to 
play, rewind, zoom and pause 
the execution. 

The Watson Center re- 
searchers also have devised new 
programming models for real- 
time systems called Expedited 
continued on page 27 ► 



GPLv3: What a Long, Strange Trip It's Been 

Richard Stallman ruminates on the process of producing the new GPL 



BY ALEX HANDY 

With the GPLv3 revisions com- 
plete, the time of decision for 
developers has begun. But 
while only time will tell whether 
the GNU/Linux kernel moves 
to GPLv3, one thing is certain: 
The GPL revision process is for- 
ever changed. For keeper of the 
GPL flame Richard Stallman, 
the days of going it alone are 
history. While Stallman has no 
plans for the community now 
built around the revision 
process for GPLv3, he recog- 
nizes that the way in which the 
revisions were developed was a 
win for all parties involved. 

Stallman originally created 
the GNU Public License in 
1989. Two years later, he was 
working on an updated version 
of the license. "For GPL version 
2, I knew of certain problems I 
wanted to deal with. I spoke with 



our lawyer, and we worked out 
solutions and then we published 
it. At the time, the GPL was not 
very much used by programs 
that weren't part of the GNU 
system," said Stallman. 

But when the time to revise 
GPLv2 came last year, Stallman 
and the Free Software Founda- 
tion decided to try something 
new, something approaching 
democracy. So for the past year, 
individuals within the open 
source community have submit- 
ted their comments on the new 
version of the GPL. In some 
ways, this new focus on commu- 
nity mirrors the changes that 
have taken place in software as 
well as its licensing over the past 
15 years, thanks to the GPL 
itself. 

"It is a process of giving 
everyone a chance to look for 
errors. We've got to be a lot more 



careful with the GPL than with 
our programs," said Stallman. 
That's because the GPL can't be 
constantly refined and revised, 
unlike the software it governs. 

The ability to distribute 
modified GPL code in black- 



box hardware without releasing 
source code for the modifica- 
tions has been snuffed out with 
the release of GPLv3, said 
Stallman. "We had a lot of 
changes in the ways to address 
the dangers of Tivo-ization,' 




Now that GPLv3 is finished, Richard Stallman can again travel the world to 
evangelize the free software movement. 



and a way to deal with software 
patents and the threats they 
make. We're trying to protect 
free software from a fate worse 
than death," he claimed. 

From a global perspective, 
Stallman also said that GPLv3 is 
more applicable, thanks to the 
help of the many users who 
wrote in with suggestions. "The 
work we did to make the license 
more internationally uniform is 
also a thing where we did some 
of it, and we found out during 
the process that we had to do 
more of it," said Stallman. 

For now, Stallman returns to 
his daily duties at the Free Soft- 
ware Foundation. He predicts 
that the GPL may need another 
makeover someday, but he is 
confident that the community 
will again come to his aid when 
asked. He predicts that those he 
sees as the enemies of free soft- 
ware will not relinquish their 
assault anytime soon. "The point 
of this is to defend the freedom 
of all users of free software," 
Stallman said. "It's work that has 
to be done because it's needed." I 



I 5FRFNA. ALM FIEiD GUIDE 









eak Ji. , 
flipttjj [,l,,, rl 

■ 
on mm' , 



Itrni. 



sorijges 






iVaoigating 

APPL.CATION UFECYCLE MANAGEMENT 




THIS IS NOT GOOD" 



F,C 9,-CAPTATW BLINDSlDFD AS FOG SETTLE OV« OEVFLCPMth.. nn • 
N^nfl fci eft^q* ^r op ™„ ^^ ^ er 1han a g * ^ M£Nt Pflo «SS. 

WHEN A]M SENDS AN 5.O.S. 

A new wave f demand for application, is hitting IT, aid organization 
-**d tu r^portd m& * mm .r, and mo* cost -effectively than ever 
Thus . challenge wi*n j^\* g* to maflSEC a partf^ of pmjec* 
coordinate distributed development trams running mu |tipj, tools 
ancf-ofeourse-deW for your y5Cf!ir S^, fc ^ ^^ ^ ;' 
eampam Jcdkttcd solely to cnteipris* Application Life^ Mat^L^ 
Let *I hel F you navigate th* complies of aofero development in ' 
today's enterprise waters. 



vhumeze m 

SITTING KEOLrl REMISES 



RH> HI THE IIK5I TIME 



"Mrn^y" 



. 



SERENA ALM WEBINAR SERIES 



DELIVER BEJSrKt5S.C«.\NeiN& 

iOFTWAlL, FASTIS 

Haw to gar (ho ifglir 

people en hie richl 

f-FDJeds nt Iht rignf Kma 



THI KDAD TO 

IT UCELLIUCE 

Haw £¥U j Eduaad co5l: r 

ihai1o*ind ai-dgef Eyd*^ 

and gained fusibility 



TWO WDR1DS COLLIDE 
The vaiiuD aP combining 

fPnA and AIM: 
The FftAD p-mrspachvn 



I 



hWW 1NIEGSATIDN 
&F ALM AND PFM 



PKlVIDEi B1TH£ VSSIf LLITT 
INTO APP DEV 



BUIlfllHti KITES SDFTIMJUK 

WaKimii* i\w JiQI 

at /\pplica=ian LHecycle- 

rt a nag a muni 



BUILD BETTER AFPS. START HERE i WWW.Serena. COtn/AlM Webiii ftt'.'<it>t'ies 



www.sdtimes.com 



. Software Development Times . July 15, 2007 



NEWS 



The Future Is in the Process 

Evolving software needs new processes, tools 



BY ALEX HANDY 

There is a clear certainty about 
software: Programs will grow in 
scale and complexity to match 
the available processing power. 

In the future, software will 
certainly wind its way into new 
uses, and developers will likely 
create and use new languages 
and systems at a relatively con- 
sistent pace. But the future also 
holds some uncertainties. In 
late June, the Supernova con- 
ference in San Francisco gath- 
ered together some software 
luminaries to discuss that 
future, and the resulting pre- 
dictions painted a picture of 
what's to come that will leave 
much of modern software 
design behind us. 

Irving Wladawsky-Berger, 
chairman emeritus of the IBM 
Academy of Technology and 
visiting professor of engineer- 
ing systems at MIT, intimated 
that the biggest challenge fac- 
ing businesses today isn't the 
software — it's the people. 

"If you look at a normal 
stack we associate with the 
business of technology, what we 
normally think of as the more 
pure technology parts are 
the back-office parts," said 
Wladawsky-Berger. "In a typi- 
cal business, the numbers of 
processes that are back-office 
are far smaller than the number 
that are more market-facing. 
Most of the market-facing stuff 
is done with labor. Most of the 
back-office stuff has been suc- 
cessfully automated." 

But that division between 
what machines can automate 
and what only humans can do 
has quickly become blurred, 
said Wladawsky-Berger. That 
comes, in part, thanks to Web 
2.0 applications such as 
MySpace and Flickr, which 
can translate person-to-person 
connections into If-Then 
statements. 

"Until recently, we didn't 
have enough technology to 
apply to the people and ser- 
vices side of the business. If 
you're going to apply technolo- 
gy to a process, processes that 
are deterministic are much eas- 
ier. Processes involving people 
are far, far more complicated 
because people are a pain in 
the ass," said Wladawsky-Berg- 
er. "They are not deterministic. 
There's a huge difference 



To achieve massive 
innovation, you don't 
have to change 
everything at once.' 



-Irving Wladawsky-Berger, 
chairman emeritus of the 
IBM Academy of Technology 




between people and machines. 
It takes way more technology 
to meet their abilities. That's 
why the services side [of the 
software business] has explod- 
ed over the last few years. We 
are now in a situation where, 
not only do we have these 
incredibly complex systems we 
want to go after, but a huge 
part of those systems are non- 
deterministic, not predictable 
in nature. That means we have 
to find new approaches for 
designing technology for these 
systems." 

But Wladawsky-Berger pre- 
dicted that throwing out the 
lessons of the past will not cre- 
ate a future. "In evolution, 
some things are carried over 
for a very long time, and some 
things change from system to 
system. It's interesting how 
many species reproduce as 
male and female. Somebody 
could have said, 'Let's try seven 
different sexes.' Somehow, two 
seemed to do it, and those 
processes have propagated and 
forced changes to other 
processes. To achieve massive 
innovation, you don't have to 
change everything at once," he 
said. 

As for his predictions for 
the future, Wladawsky-Berger 
believes that software develop- 
ment is still in its infancy, when 
compared with physical engi- 
neering systems and practices. 
He compared current software 
tools to the tooling used in the 
aerospace industry. When 
building a plane, he said, thou- 
sands of different and highly 
specialized tools come into play. 
For each airplane, some new 
tools may be built, but the vast 



majority of tools are standard 
and used in almost all work. 
However, in software, this type 
of categorization applies only to 
a small handful of tools, such as 
build-related tooling and IDEs. 

NEXT GENERATION 

Other presenters at the confer- 
ence were able to show off 
some of the capabilities of next- 
generation software. Udi Man- 
ber, vice president of engineer- 
ing at Google, demonstrated 
some of the context-sensitive 
search capabilities of Google's 
software, though he did not 
elaborate on how these features 
were created. 

"If you search for types of 
dogs, we'll give you good 
results, but in the middle of the 
page we'll insert suggestions 
for 'breed of dogs,' which will 
give you better results. Our 
attempt is to understand 
queries, and suggest different 
formulations of queries that 
will give better results," Man- 
ber noted. This type of context 
awareness is one of the reasons 
Google is able to attract 
unskilled users and improve 
their comprehension of the 
Internet as a whole, he said. 

"Any business you run is 
constantly in a state of shift, so 
the architectures for this very 
complex system have to be flex- 
ible and adaptable. That's not 
where we are today," claimed 
Wladawsky-Berger. "That's why 
I believe these kinds of require- 
ments will consume every sin- 
gle bit of technology you put 
out there. In my mind, that's 
what it truly means to transition 
from the industrial to the 
knowledge economy." I 
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Real-Time Innovations, a provider of real-time messaging middle- 
ware, announced that it has integrated its RTI Data Distribution Ser- 
vice with the Sun Java Real-Time System from 
Sun Microsystems. The integration enables devel- 
opers to combine RTI's messaging capabilities 
with the Java real-time platform, to build distributed applications 
. . . Applications development software provider Aonix has 
announced that a Memorandum of Understanding has been reached 
with Fujitsu and NTK Aviation America, for mutual cooperation in 
products and services. The agreement will bring Aonix's application 
development technology to Fujitsu's airborne computer systems. 
Additionally, Aonix announced that it will contribute its Ameos mod- 
eling technology to the open source community, under the name 
OpenAmeos . . . Lab49, a consulting firm that specializes in building 
advanced applications for global financial institutions, announced it 
has extended its offerings to include Complex 
Event Processing (CEP). Lab49 officials said 
that CEP fits well into the company's other tech- 



LAB HI 



nologies, such as large-scale grid computing and advanced visualiza- 
tion . . . Mindreef and LogicLibrary have paired up to build an inte- 
grated SOA governance and testing solution. LogicLibrary's Logidex 
SDA governance hub will integrate with Mindreef's SOA testing and 
guality platform, and SOAPscope Server will integrate with Mindreef 
Policy Rules Manager. 



NEW PRODUCTS 



mValent, a Burlington, Mass.-based provider of automated configu- 
ration management solutions for complex application infrastruc- 
tures, has announced mValent Integrity for 
Microsoft Windows environments. mValent 
Integrity provides features for configuration management, along 
with audit and compliance functions. The tool allows IT managers to 
view an application's infrastructure and its configuration dependen- 
cies, as well as report on changes and authorizations for compliance 
. . . Backbase has announced Ajax 360, a solution that the compa- 
ny claims addresses some of the biggest concerns over AJAX tech- 
nologies. Ajax 360 includes more than 250 prebuilt AJAX widgets, 
sample applications, and IDE plug-ins for code completion . . . Vera- 
code has launched its Software Security Ratings Service, a service 
that scans binary code and benefits developers using SOA by allow- 
ing them to test code being drawn from multiple programs, the com- 
pany claims. Software is tested on an A-F letter grade system, 
receiving three different grades based on a scan of binary code, 
dynamic analysis testing and manual code review that is carried out 
by a penetration tester . . . McCabe Software, a provider of ALM and 
configuration management tools, has 
announced that McCabe CM-TRUEchange 
Agent, the company's release management 
tool, is shipping. Agent introduces the concept of Universal Release 
Management, which allows jobs to be scheduled at any time and to 
multiple systems . . . Freescale Semiconductor introduced the first 
two members of the company's Flexis microcontroller family on June 
26 at the Freescale Technology Forum conference in Orlando, Fla. The 
Flexis QE128 devices allow developers to use the same board design, 
development tools and software to scale simple devices built on the 
8-bit MC9S08QE128 up to more advanced systems using the 32-bit 
MCF51QE128, by simply replacing the pin-compatible microcontrollers. 
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UPGRADES 



_L 



Axtools, creator of the CodeSmart add-in for Microsoft Visual Studio 
.NET, has shipped CodeSmart 2007 for VS.NET. New features in 
the release include Code Analyzer, which can test Visual Basic and 
C# code, and Designer Analyzer, for examining Windows Forms 
components . . . Microsoft developed 
Dynamics SL 7.0 with Visual Studio 2005 to 
offer new tools and interfaces for developers working with Visual 

continued on page 13 ► 






MoOTon EyrumKS 



6 



NEWS 



Software Development Times . July 15, 2007 . 



www.sdtimes.com 



Yahoo for New Commercial API Programs 



BY JEFF FEINMAN 

Perhaps it's about keeping up 
with Google. Perhaps Yahoo is 
simply sticking to its game 
plan. In either case, Yahoos 
announcement last month un- 
veiling its Search Marketing 



Commercial API Program, 
which provides businesses and 
developers free access to the 
Panama search marketing APIs, 
represents a step in the right 
direction, according to one 
Gartner analyst. 



The Panama service, 
launched earlier in the year, is a 
platform that provides APIs for 
advertisers, commercial ad tool 
developers and search mar- 
keters. With the new API pro- 
gram, developers and commer- 



cial partners can build upon 
Yahoos core search marketing 
technologies or create new 
search marketing tools and 
applications. 

Aside from the free access to 
Yahoos APIs, there are optional 
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fee-based services that include 
technical support and co-mar- 
keting opportunities, designed 
to provide partnership support 
to companies creating commer- 
cial advertising applications. The 
program offers three options: a 
basic level for small advertising 
agencies, the "Advanced" tier 
for midlevel ad agencies that 
comes with technical account 
management support and listing 
in an application directory, and 
for larger agencies an "Elite" 
program that offers joint mar- 
keting activities and product 
road-map coordination. 

"Yahoo is dedicated to 
driving third-party innovation 
and success because we know it 
is vital to the future growth of the 
online advertising industry," said 
Susan Decker, head of Yahoos 
advertiser and publisher group. 

FALLING BEHIND 

But is Yahoo opening up its 
technology out of confidence, 
or as a way of chasing Google? 
Ray Valdez, an analyst with 
Gartner, said that much of the 
angst and turnover at Yahoo — 
from the notorious "peanut but- 
ter" manifesto, which com- 
plained the company was 
spreading its resources too thin, 
to the resignation of CEO Ter- 
ry Semel — stems from Yahoos 
failure to keep up with Google. 

"I really like Yahoo's UI 
approach; they have design pat- 
terns and a toolkit that is not 
[built] around Java," Valdez 
said. "Google's AJAX toolkit is 
intended for people to program 
in Java, and it gets translated to 
JavaScript, and there are issues 
around that." 

Although Valdez offers praise 
for Yahoo's technology, he's skep- 
tical of the company's ability to 
compete in the long haul without 
a serious rethink of its efforts. He 
explained, "There are plenty of 
places where you can find advan- 
tages for Yahoo, but at the end of 
the day, when you add it up, you 
find advantages on the Google 
side and deficiencies on the 
Yahoo side." 

Valdez believes the company 
has lost its way in recent years, 
"and that is attributed from on 
high: not hiring enough experi- 
enced people to come up with 
new search algorithms, not fix- 
ing or marketing the blogging, 
and the list goes on. I don't 
think it's one person's fault... 
but I think it's an indicator that 
change is needed." I 
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Macrovision Builds Footbridge to SaaS 

Idea is to move ISVs to electronic software delivery with a repeatable process, platform 



BY DAVID RUBINSTEIN 

The notion of software as a ser- 
vice holds the promises of 
quick, seamless updates, keep- 
ing the software in a centralized 
location and reducing the cost 
of implementing new software. 

But beyond the issues of 
licensing and installing the soft- 
ware, vendors must look at how 
they interact with their cus- 
tomers to provide the best 
experience possible. ISVs that 
currently deliver software via 
disk, or via a mix of Web and 
disk delivery, do not yet have 
repeatable processes in place 
for getting software to their 
customers electronically. 

"ISVs don't realize they have 
these problems till they start 
down this path," explained 
Corey Ferengul, executive vice 
president of marketing for 
Macrovision. "They don't 
understand how much their 
processes have to change to 
accommodate this." 

ISV customers, he said, want 
less implementation time and 
less cost, said Trent Wheeler, 
product manager at Macrovi- 
sion. "Customers have those 
expectations, but ad hoc 
processes make things more 
complex for the ISV," he said. 
"We want to provide a produc- 
tized process." 

To that end, Macrovision in 
late June released FLEXnet 
Delivery, an extension of its 
licensing product that serves as a 
portal for downloading software 
and updates. "Electronic soft- 
ware delivery is the first step to 
SaaS," explained Corey Feren- 
gul, executive vice president of 
marketing for Macrovision. 

BUILDING TRUST 

ISVs first have to gain the trust 
that a third-party such as Macro- 
vision can provide security and 
run the delivery system, he said. 
FLEXnet Delivery is designed 
to build that trust, letting ISVs 
create the portal and alert cus- 
tomers to the availability of new 
or updated software. 

End users receive details of 
their licensing terms so they can 
manage their software installa- 
tion themselves, Wheeler 
explained. In addition, the soft- 
ware provides metrics about 
software use that can help soft- 
ware customers better tailor 
their buying decisions and ISVs 



better develop and customize 
the software. 

Ferengul noted that end 
users need the confidence that 



they will be able to access the 
software when it's needed, that 
bandwidth costs won't be high, 
and that digital transactions are 



swift and secure. 

Ferengul expects that soft- 
ware as a service will evolve. 
"People will try to do it in- 



house, then they'll look for 
third-party solutions," he pre- 
dicted. "Confusion will reign 
for a year or two." I 
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JRuby Project Finally Stacks Up 

Version 1.0 release mixes libraries in the JVM to create a happy medium 



BY ALEX HANDY 

In early June, the five-year 
odyssey that has been the 
JRuby project finally reached 
its goal, with the public release 
of version 1.0. This free and 
open source tool allows users to 
run Ruby applications inside of 
a JVM, and with it comes access 
to the combined libraries of 
Java and Ruby. 

While Ruby has recently 
seen renewed interest, thanks 
to the Ruby-on-Rails Web 
framework, there has been 
one point of concern for many: 
Ruby libraries and APIs are 
scarce, in part because until 
recently, the language itself 
simply wasn't that popular. But 
according to Charlie Nutter, 
core developer of JRuby, his 
project makes this a moot 
point. 

"There was some work that 
had already been done, for call- 
ing Java libraries from Ruby 
code and vice versa," said Nutter 
of the situation when he joined 
the JRuby project in 2004. "We 




Charlie Nutter (left) and Thomas Enebo unveiled JRuby 1.0 at a Ruby 
conference in Japan. 



added more features [to JRuby] 
before the 1.0 release. We've 
been hearing from people that 
they don't even think about the 
fact they're calling Java APIs; it 
just looks like Ruby code. It's 
useful for libraries and frame- 
works that don't have a good 
equivalent in Ruby libraries, 
such as XSL transformations. 
Currently, there is no library in 



Ruby that does XSL." 

So while the appeal of run- 
ning Ruby applications inside 
of a Java application server is 
certainly a draw for JRuby, 
Nutter believes the ability to 
use Java libraries is just as 
compelling. "I think it defi- 
nitely makes it more appeal- 
ing, both to Ruby developers 
looking for functionality, and 



for Java developers who have 
an understanding of those 
libraries and don't want to 
leave the platform." 

Jeffrey Hammond, senior 
analyst at Forrester, said that 
many developers are already 
interested in dynamic lan- 
guages for gluing and integrat- 
ing applications. "It gives them 
an opportunity to really take 
advantage of the capabilities of 
these newer dynamic lan- 
guages," he said. "If you're try- 
ing to stitch applications 
together and you want to do 
things quickly, Ruby or Python 
or any of these languages makes 
a lot of sense." 

But the project, which 
began in 2002 before Nutter 
came on board, hasn't been a 
paddleboat ride for the highly 
distributed and largely volun- 
teer development team. While 
Nutter and his colleague 
Thomas Enebo were hired by 
Sun Microsystems in Septem- 
ber, their largest challenge up 
to that point was the lack of a 



specification for the language. 
Thus, Nutter and Enebo spent 
much of their time reverse- 
engineering the existing C- 
based implementation of 
Ruby. "I think the biggest sur- 
prise was how few people 
understand how the real 
implementation of Ruby 
works," said Nutter. "There's 
no specification for the Ruby 
language or the implementa- 
tion. We kept writing test 
upon test upon test, and ask- 
ing questions of people in the 
Ruby community. There are 
now a number of the other 
burgeoning Ruby implementa- 
tions using our test suites as 
well." 

Next on their plate is a 
round of performance up- 
grades. While the focus of 
JRuby version 1.0 has been 
compatibility, Nutter said 
the next edition will attempt to 
be faster than the C imple- 
mentation of the language. 
JRuby 1.0 can be downloaded 
atjruby.codehaus.org. I 
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Visualization, Multicore 
Make for Complex Pricing 

ISVs have learned not to charge per core, 
but will virtualized hosts follow suit? 



BY ALEX HANDY 

In the two years since multicore proces- 
sors and virtualization each came to the 
forefront of computer technology, soft- 
ware vendors have partially adapted 
their pricing models to meet the needs 
of these complex technologies. While 
the fight over per-core fees has died 
down, the battle over fees for virtualized 
hosts is still raging. 

During the past year, industry giants 
such as Microsoft and Oracle have adapt- 
ed their pricing structures — moves that 
have only helped to 
make enterprise cus- 
tomers happier. But this 
added complexity has 
also served to muddy 
the waters of software 
pricing, and Microsoft's 
own pricing models and 
partnerships show that 
virtualization can make 
for strange bedfellows. 

Bob Tenczar, direc- 
tor of product manage- 
ment at Microsoft's Win- 
dows Server division, 
explained that his com- 
pany hasn't had to revise 
its pricing policy for 
multicore processors: It 
never charged per core 
to begin with, only by 
the physical processor 
count. But that hasn't 
been the case with virtualization. 

Tenczar said that Microsoft's plans to 
include virtualization in Windows Server 
2008 forced it to rethink its licensing 
policies for virtualized installations of 
Windows. Microsoft then changed its 
virtualization licensing policy, to reflect 
the behavior and needs of its customers. 

'FAIR AND LOGICAL' 

The most generous terms are available 
to users of the top-shelf Windows Serv- 
er 2003 R2 Datacenter Edition, Tenczar 
continued. "We license by processor, but 
that license allows you to run as many 
virtualized instances of the OS on that 
machine as you want. The approach 
we've taken is that we license by the 
physical processor. It's unlimited virtual- 
ization on top of that. This extends to 
SQL Server [2005] Enterprise Edition 
as well." SQL Server 2005 Workgroup 
and Standard Edition are also allowed 
unlimited instances. "We want it to be 
fair and logical," Tenczar noted. 

But other versions of Microsoft's oper- 
ating system offer more limited virtual- 
ization licenses. For example, the next 




'[Virtualization] is 
causing more and more 
software vendors to 
take a critical look at 
their licensing policies. ' 

—Bogamil Balkansky, 

senior director of 

product marketing, VMware 



level down — Windows Server 2003 R2 
Enterprise Edition — allows the use of up 
to four virtual instances per machine. 

Meanwhile, Oracle has changed its 
hardware-based pricing to take multi- 
core technologies into account while for 
the most part ignoring virtualization in 
its pricing structure. The company offers 
complex pricing models that factor in 
the number of cores per processor. By 
contrast, the company now distributes a 
free trial version of its database software 
that runs inside a supplied VMware vir- 
tual machine. 

John Bara, vice pres- 
ident for marketing at 
virtualization company 
XenSource, said that he 
believes virtualization 
and multicore proces- 
sors will drive prices 
below those currently 
charged by most big 
software vendors. 

"Software vendors 
have charged a capacity 
tax on end users," ex- 
plained Bara. "The big- 
ger the box, the more 
you pay. With multicore, 
what I see emerging is 
[that] we're not going to 
chase the cores, and 
count the cores. It's 
ridiculous to get to that 
level." 

Bara sees an eventual erosion of that 
capacity tax, noting, "I've tracked prices 
in the software industry for 20 years, and 
I think this is a big change." 

Bogamil Balkansky, senior director of 
product marketing at VMware, said, "Vir- 
tualization is changing quite a bit in the 
data center. It is causing more and more 
software vendors to take a critical look at 
their licensing policies." He added that 
there have been a number of ways to 
charge for software over the years. 
"These different models are [alternately] 
more or less appropriate for virtualiza- 
tion. I expect we'll see significant move- 
ment in that area," he predicted. 

Matt Eastwood, vice president of 
IDC's enterprise platform group, argued 
that, as processor transistor counts 
increase, software prices should decrease. 
"There is very much an expectation that 
cost of software will move in alignment 
with Moore's Law. If that doesn't hap- 
pen," he added, "the end users we've 
been speaking to will look at other alter- 
natives. For octo-core and beyond, it's 
really critical that the whole IT industry 
understands that." I 
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Software 
Evangelism 
In 10 Steps 

Former Apple guru Guy Kawasaki 
discusses 'selling the dream 7 



BY ALAN ZEICHICK 

Guy Kawasaki is a legend in Sil- 
icon Valley. One might even 
define Kawasaki as the arche- 
typical evangelist, best known 
for his tenure at Apple Comput- 
er in the mid-1980s publicizing 
the Macintosh. Since leaving 
Apple in 1987, Kawasaki went 
on to found a database software 
company called ACIUS, and 
then a database company called 
Fog City Software. He later 
returned briefly to Apple to 
evangelize the Mac once again, 
but now works as a venture cap- 
italist, and as the founder of a 
new Web site called Truemors. 

Kawasaki is famous not only 
for his software evangelism, but 
also for recommending that all 
presentations contain precisely 
10 slides. 

In that spirit, when SD 
Times caught up with Kawasa- 
ki, we asked him approximately 
10 questions about software 
evangelism. 

SD Times: How would you define 
the role of an "evangelist" in a 
software business? Where does 
the evangelist fit into the organi- 
zation chart? 

Guy Kawasaki: An evangelist is 
a person who "sells the dream" 
of the benefits of using the soft- 
ware. Hopefully, the software 
can make you more creative, 
productive, secure or something 
like that. Truly, every person 
should be evangelistic, every- 
where. The CEO would be nice, 
but usually evangelists are in 
marketing. 

What's the relationship between 
an evangelist and the software 
development organization— the 
architects, the project managers, 
the coders, the testers? How can 
they best work together? 
Ideally, the evangelist came 
from the software development 
organization, but that's not 
common. Next best is if the 
evangelist views software as an 
art and the programmers view 
evangelism as an art too. 



What's the relationship between 
an evangelist and the marketing 
department and even the sales 
department? How can they work 
together without turning the 
evangelist into a marketer or 
salesperson? 

Usually the evangelist is in one 
of these departments. It's just 
that results are measured in 
mindshare and heartshare — as 
opposed to market share. 
How do you find evangelists, or 
someone to manage your evange- 
lism program? 

Usually they find you — they 
appear out of the early 
adopters of your software. 
They hardly ever come from 
your competitors unless the 
person has "seen the light." 
What are the qualities and expe- 
rience that you should look for? 
Where do you find these people? 
How many should you hire or 
recruit? 

Can you count? This isn't 10 
questions. This is 10 sets of 
questions. You should look pri- 
marily for people who "get it" 
and want to change the world 
with your software. Education 
and work experience is not near- 
ly as important as "getting it." 
How much should you spend on 
evangelists— salary, stipends, 
travel? How can you judge when 
something is a good use of 
resources or not? And where 
should this be charged? Mar- 
keting? 

Every case is different, but gen- 
erally they are at the "market- 
ing manager" level of compen- 
sation, etc. 

What about non-monetary com- 
pensation? How do you encour- 
age all those people who just 
love your product to help evan- 
gelize — and how do you thank 
them without insulting them, or 
making them think they've 
"sold out"? 

Most evangelists are outside the 
company; they are not employ- 
ees. These you shouldn't pay — 
nor do you need to. Their 
reward is being in the know and 



affiliating with a good cause. 
You should provide them warm 
and fuzzies — T-shirts, early 
releases, conferences, but not 
money. 

How much guidance should you 
give an evangelist, in terms of 
his/her goals, and how he/she 
operates? What things should 
you require an evangelist to do, 
and where should you stay 
hands-off? 

Depends on the level of experi- 
ence of the evangelist. General- 
ly speaking, you should leave 
them alone. That's the nature of 
an evangelistic personality. 
How can you assess if your evan- 
gelists are doing a good job for 
you — and how can you justify 
that to senior managers (who are 
always scrutinizing the budget)? 
How can you tell if they're hurt- 
ing you instead of helping? 
Either they are creating enthu- 
siasm or they're not. Are more 
people signing up for the devel- 
oper program? Are more apps 
coming out? Is traffic increas- 
ing for the part of the site 
where developer information 
resides? All these are good 
questions. 

If someone wants to become a 
software evangelist, either as a 
career or because he/she is pas- 
sionate, what's the best way to 
go about getting started? 
Find something that you love. 
Finally, a bonus question: How 
about evangelizing within an 
enterprise for its own internally 
developed software applications? 
How is that different, how is that 
the same, as the traditional out- 
ward-facing evangelism that you 
were famous for at Apple? 
It's actually more similar than 
different. An internal evange- 
list should pretend that the 
internal audience isn't part of 
the same company. For one 
thing, most large companies 
are little fiefdoms. The 
assumption that you have to 
pitch and grovel to your col- 
leagues in the same company is 
a safe one. I 
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Studio 2005. Other improvements include role-based menus and 
data views . . . Amplefile, creator of the DotNetRemoting frame- 
work, has released DotNetRemoting 2.0.1, a communication library 
that is a universal network communication framework for PC and 
pocket devices. The core features of the new version include bidi- 
rectional communication by sending objects on the server and 
client, supported protocols such as HTTP and TCP, and the ability to 
operate with FastSerializer, Amplefile's technology that increases an 
object's serialization . . . iRise Software, a provider of simulation 
software, has announced version 6 of its iRise application and sim- 
ulation platform. iRise claims that this is the industry's first visual 
definition tool that allows business analysts to create simulations of 
AJAX and other Web 2.0 behaviors. iRise Studio serves as the 
authoring environment for business analysts and developers, with a 
shared server to allow collaboration . . . FarPoint Technologies, a 
provider of spreadsheet component technology, has released the 
newest version of its spreadsheet component „|: pr fWni i 
for .NET development, FarPoint Spread for OprCcLfl 
Windows Forms 3.0. The new version con- 
sists mainly of improvements to display, such as annotation mode, 
Microsoft Outlook-style grouping, and the ability to place controls on 
a spreadsheet . . . Progress Software, provider of software for busi- 
ness applications, has announced the availability of version 7.0 of 
the Progress ObjectStore Enterprise Platform, a storage environ- 
I j ^ fy^i^-pp ment for managing complex data. The 
J" 7 AhA^I H-jJO new version features an AJAX-based 
S O F T n A RE management tool that helps monitor 
system processes, and support for Microsoft's Windows Vista 
. . . SpreadsheetGear, a Lenexa, Kan.-based provider of Microsoft 
Excel-compatible spreadsheet components, has announced Spread- 
sheetGear for .NET 2007. Its key new feature is its Windows Forms 
Spreadsheet Controls, which give developers the ability to create 
and format Microsoft Excel workbooks without Excel . . . CA has 
released a new version of CA ERwin Data Modeler, a product that 
helps database designers create databases and schemas. Version 
7.2 can be integrated with Microsoft Visual Studio, and adds a new 
PDF index that eases navigation of the large reports commonly gen- 
erated in enterprise environments . . . Compuware has announced 
Compuware Changepoint 12, the newest version of its IT portfolio 
management software. The Client Portal has been extended to 
enable business users to participate in everyday IT activity, whether 
it is submitting change requests or approval on funding . . . Middle- 
ware and distributed computing software provider Recursion Soft- 
ware has announced that it has inte- ^ RcrajRCjinu 
grated its Voyager Edge 6.1 Java and 

.NET application platform for the JBoss Enterprise Application Plat- 
form. The integration gives customers the ability to build mobile 
applications to run on multiple wireless devices and networks 
. . . Network simulation software provider Shunra has announced 
version 3.0 of its Shunra VE Desktop client/server network simula- 
tion software, adding support for Windows Vista and the ability to be 
deployed on any software distribution system . . . TotalView Tech- 
nologies, a provider of debugging and analysis software tools, has 
announced the availability of TotalView Debugger 
8.2. The new version of TotalView Debugger offers 
support for the Cray XT4 parallel processor system, 
the Fedora Core 6 Linux distribution tool, and the Ubuntu Linux- 
based operating system. 



TdtalVie^ 



PEOPLE 



On-demand application deployment provider AppStream has named 
Srinivasa Venkataraman as its new CEO. Formerly serving as COO 
of AppStream, Venkataraman has been involved in software for more 
than 20 years. He has served as vice president of research and 
development at Zone Labs and vice president of development at 
Senterprise. Venkataraman holds a master of science degree from 
Purdue University. I 
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Nexaweb Tries to Close SOA Circle 

Web2S0A program to support customers' multivendor SOA initiatives 



BY DAVID WORTHINGTON 

Nexaweb has set in motion a 
SOA and Web 2.0 ecosystem 
program called Web2SOA, to 



entice enterprises to deliver 
their SOA initiatives to end 
users via Nexaweb s Enterprise 
Web 2.0 and Service-Oriented 



Business Applications (SOB A) 
solution. The program was 
announced on June 26. 

In order to build an ecosys- 



tem around its products, 
Nexaweb aligned itself with 
ISVs, OEMs and system inte- 
grators, and crafted its Nexa- 



Your best source for 
software development tools! 



^4> 



Now with 
64-bit Support! 



Paradise # 
L050569 

$ 829." 



Paradise # 
T340201 

$ 487." 



Paradise # 
D770148 

$ 1,444. 



99 



LEADTOOLS 
Raster Imaging Pro 

by LEAD Technologies 

Raster Imaging Pro gives developers the tools 
to create powerful imaging applications. LEAD- 
TOOLS libraries extend the imaging support of 
the .NET framework by providing comprehen- 
sive support for image file formats (1 50+), 
200 image processing filters, compression, 
TWAIN scanning, high-speed image display, 
color conversion, screen capture, special effects 
and more. 
•. NET, API & C++ Class Library 

• New Web Forms Control 

• New Class Libraries for .NET 

• Royalty Free „ . 

programmers.com/lead 

DevTrack 

Powerful Defect and Project Tracking 
by TechExcel 

TechExcel DevTrack is the most powerful, 
affordable and easy-to-use defect and project 
tracking tool for development organizations. 
You'll dramatically transform your development 
processes, save significant time and resources, 
and deliver quality products on-time and 
on-budget. 

• Distributed team support 

• Sophisticated workflow engine 

• Built-in indexed search engine 

• Point-and-click administration 

• Fully configurable user interface 

programmers.com/techexcel 

/n software Red Carpet 
Subscriptions 

by /n software 

/n software Red Carpet™ Subscriptions give 
you everything in one package: communica- 
tions components for every major Internet 
protocol, SSL and SSH security, S/MIME 
encryption, Digital Certificates, Credit Card 
Processing, ZIP compression, Instant 
Messaging, and even e-business (EDI) 
transactions. .NET, Java, COM, C++, Delphi, 
everything is included, together with per 
developer licensing, free quarterly update CDs 
and free upgrades during the subscription term. 



programmers.com/nsoftware 

Adobe FlexBuilder 2 

by Adobe 

Adobe® FlexBuilder™ 2 software is a rich 
Internet application framework based on 
Adobe Flash® that will enable you to 
productively create beautiful, scalable 
applications that can reach virtually anyone 
on any platform. It includes a powerful, 
Eclipse™ based development tool, an 
extensive visual component library, and 
high-performance data services enabling 
you to meet your applications' most 
demanding needs. 



Paradise # 
A14137P 

$ 478." 



programmers.com/adobe ! 



800-445-7899 



program meijJs -♦; 

paradise^ 



dtSearch Web with Spider 

Quickly publish a large amount of data to a Web site 

• Dozens of full-text and fielded data search options. 
•Highlights hits in XML, HTML and PDF, while 

displaying links and images; converts other files 
("Office," ZIP, etc.) to HTML with highlighted hits. 

• Spider adds local or remote web sites (static and 
dynamic content) to searchable database 

• Optional API supports SQL, C++, Java, and all 
.NET languages. 

"Bottom line: dtSearch manages a terabyte of 
text in a single index and returns results in 
less than a second. " — InfoWorld 



Download dtSearch Desktop with 
Spider for immediate evaluation 

c-tree Plus® 

by FairCom 

With unparalleled performance and sophistication, 
c-tree Plus gives developers absolute control over 
their data management needs. Commercial 
developers use c-tree Plus for a wide 
variety of embedded, vertical market, 
and enterprise-wide database applications. 
Use any one or a combination of our flexible 
APIs including low-level and ISAM C APIs, simplified 
C and C++ database APIs, SQL, ODBC, or JDBC. 
c-tree Plus can be used to develop single-user and 
multi-user non-server applications or client-side 
application for FairCom's robust database server 
— the c-treeSQL™ Server. Windows to Mac to 
Unix all in one package. 



Single Server 
Paradise # 
D29072P 

$ 888." 

programmers.com/dtsearch 



Intel® Cluster Toolkit 

by Intel® 

Create applications for Intel® processor- 
based cluster systems with performance- 
enhancing tools that include perform- 
ance libraries, performance analyzers, 
and benchmark tests — integrated into 
one easy-to-install software bundle. 
Intel® Cluster Toolkit 3.0 for Linux 
adds more than 20 new features to the 
core libraries and tools to efficiently 
develop, optimize, run, and distribute 
parallel applications on clusters with 
Intel processors. 



£?1 
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Paradise # 
123 31 101A01 

$ 713." 

programmers.com/intel 



NEW! VMware Workstation 
6.0 for Windows 

VMware Workstation 6.0 is the gold-standard 
virtualization software for desktop and laptop 
computers, with the richest feature set and 
broadest platform support available. VMware 
Workstation enables users to create and host 
multiple virtual machines on a single desktop, 
expanding the power of desktop systems for 
IT administrators, software development and 
test engineers, technical sales, training and 
support staff, and PC enthusiasts. 

VMware Workstation 6.0 is packed with 
new features including support for Windows 
Vista, multiple monitors and high-speed 
USB 2.0 devices, as well as the ability to 
create portable, secure virtual machines. 




V55 2200 1A03 

$ 190." 

Upgrade 
\/55 22001 B02 



$ 90 99 

programmers.com/vmware 



64-bit 
SQL 
Available! , 



Paradise # 
F010131 

$ 850." 

programmers.com/faircom 

Telerik RadControls 

by Telerik 

Add grid, combo, editing, navigation and charting 

functionality to your AJAX and ASP.NET projects. 

RadControls for ASP.NET enhances your Web 

applications by adding AJAX functionality to your ti 

ASP.NET projects. The suite takes full advantage 

of the features included in Visual Studio 2005. 

RadControls for ASP.NET helps developers deliver 

feature-rich, standards-compliant (WAI-A, WCAG 

1 .0, XHTML 1 .1 ) and cross-browser compatible 

Web applications, while significantly cutting Single Developer 

their development time. RadControls for ASP.NET Paradise # 

includes: RadEditor, RadTabstrip, Radlnput, TB30026 

RadCalendar, RadUpload, RadWindow, RadAjax, $AQ7 99 

RadGrid, RadCombobox, RadMenu, RadSpell, 

RadChart, RadTreeview and more. 



TX Text Control 13 

Word Processing Components 

TX Text Control is royalty-free, robust and 
powerful word processing software in reusable 
component form. 

•. NET WinForms control for VB.NET and C# 

• ActiveX for VB6, Delphi, VBScript/HTML, ASP 
•File formats RTF, DOC, HTML, XML, TXT 

• PDF export without additional 3rd party Professional Edition 

Paradise # 




tools or printer drivers 
■ Nested tables, headers & footers, text frames, 

bullets, numbered lists, multiple undo/redo 
• Ready-to-use toolbars and dialog boxes 



T79023W 

$ 739." 



programmers.com/theimagingsource 
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SlickEdit® 2007 

by SlickEdit Inc. 

SlickEdit® is the code editor that delivers 
unparalleled speed, power, and flexibility. 

Type fewer characters, and make fewer errors using 
syntax expansion, completions, aliases, and code 
templates. Create and manage large workspaces and 
projects. Diff files, test regular expressions, do builds, 
and interact with version control. 

Configure SlickEdit to match your coding style. 

Choose from 1 3 editor emulations, customize menus, ' or VV| ndows 

toolbars, key bindings, and mouse operations. Paradise # 

Code in over 40 languages on 8 platforms. SlickEdit 

works with Windows Vista and supports Solaris x86. ^275 •" 

programmers.com/slickedit 

Macrovision InstallAnywhere 8 
Enterprise Edition 

by Macrovision Corporation 

Delivering solutions for multiple platforms can be 

a challenge for software producers. Many rely on 

custom installations for each target operating 

system, each having its own installation experience 

and requiring individual maintenance. All of these 

add additional development overhead and support 

costs, confusion to customers and unnecessary time 

spent on the release process. Enterprise 

InstallAnywhere is the deployment software solution Paradise # 

of choice for multiplatform software developers. It 12 1 09 1 C 

delivers the ideal combination of ease-of-use and 

powerful functionality for creating multiplatform $3 269. 

software installations in minutes. 

programmers.com/macrovision 
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web Studio design time and 
Nexaweb Platform runtime 
software packages to integrate 
with third-party SOA gover- 
nance, orchestration and test- 
ing technologies. 

"Nexaweb's Web2SOA Pro- 
gram is not about creating 
another vendor-centric archi- 
tecture," said Nexaweb CEO 
Chris Heidelberger. "Our pro- 
gram is designed to ensure that 
as customers use Nexaweb to 
develop, deploy and maintain 
Enterprise Web 2.0 applica- 
tions, they can quickly and eas- 
ily leverage existing and future 
elements of their SOA initiative 
in the process." 

Architecturally, Nexaweb 
routes service requests through 
the application host and can add 
pre- and post-processing busi- 
ness logic, to trigger activities 
such as caching, data integration 
checking, data transformation 
and user input validation. Nexa- 
web interacts with the SOA 
orchestration layer through an 
API or SOAP interface, said 
Nexaweb chief software archi- 
tect Bob Buffone. 

Development teams can use 
standard application testing 
tools from vendors such as Para- 
soft to unit-test applications' 
input and output to service calls, 
explained Buffone. Web service 
testing tools make synthetic ser- 
vice calls that can be used to 
gauge application results. 

END-TO-END 

Nexaweb's tooling is designed 
to build end-to-end SOA 
applications. The Nexaweb 
Studio IDE plugs into Eclipse, 
installing top-level projects 
that enable developers to 
explore databases and design 
service-based Web applica- 
tions. The Oxygen XML editor 
is also included, to help devel- 
opers build out SOBA applica- 
tions. 

A plug-in automatically 
searches UDDI (Universal 
Description, Discovery and 
Integration) registries for ser- 
vices to populate the IDE. A 
service call's input and output 
can be bound to UI elements by 
dragging and dropping services 
onto objects, said Buffone. 

Nexaweb has established 
partnerships with systems inte- 
grators to promote its solutions 
through their SOA practices. I 
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Excel Reloads Mac-Based Modeling 



New versions of MacA&D and MacTranslator add PHP design support 



BY JEFF FEINMAN 

Excel Software has refocused 
its attention on modeling, with 
two updated tools that generate 
graphic models from source 
code and model software sys- 
tems. 

The system model and simu- 
lation company, based out of 
Placitas, N.M., released in late 
June MacA&D 2.2 and Mac- 
Translator OSX 2.0. 

MacA&D is used for system 
and software modeling, require- 
ments management, code gen- 
eration, re-engineering and pro- 
ject reports. The newest version 
supports PHP design and allows 
code generation from diagrams 
and structure charts. With the 
new PHP features, MacA&D 
enables the creation of data 
models for the design of data- 
bases and the generation of SQL 
schema. It now also allows for 
the generation of code in lan- 
guages including Basic, C/C++, 
Delphi, Fortran, Java and SQL. 

The requirements manage- 
ment features of MacA&D 2.2 
allow template changes to be 
applied across existing require- 
ment entries. New capabilities 
simplify linking and navigating 
between entries, and an 
enhanced Requirement Matrix 
window presents data through 
user-defined views and queries. 
A new shape properties dialog 
for structure and data models 
support 48 geometric shapes; it 
also controls border color, and 
the text within each shape. 

MacTranslator 2.0 also fea- 
tures support for PHP. The tool 
scans PHP source code to extract 
design information to a text file 
that is imported into MacA&D. 
MacTranslator generates models 
in numerous languages, includ- 
ing Basic, C/C++, Fortran , Pas- 
cal and SQL. MacTranslator can 
sift through and identify each 
PHP execution thread. A struc- 
ture chart is generated for each 
thread, and reused branches of a 
program are presented on a 
shared diagram. 

POPULAR ON WEB 

Excel product manager Harold 
Hableib explained that the com- 
pany decided to add support for 
PHP because of its wide use in 
Web sites. "There's an awful lot 
of major Web site development 
projects [using] PHP as the 
server site scripting engine," he 



said. "There's millions of lines of development sites. But in order 

shareware and open source to do it, you have to understand 

code out there, where you can how the code works. So you can 

download code off of PHP spend days or weeks trying to 



sift through it and understand 
how its organized, or you can 
run it through MacTranslator 
and see a graphic picture in 



about five minutes, showing 
how the code is structured." 

Excel Software started out in 
the early 1980s as a company 
focused on the Macintosh 
platform, but added Microsoft 
Windows products during the 
Windows 95 gold rush. The com- 
pany also offers designing and 
modeling software for Linux. I 
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The express route to ASP.NET AJAX development 



Introducing the first productivity tool for Microsoft ASP.NET AJAX: 

- No- need to place multiple update panels 

- No need to set numerous triggers 

* No need to write a single line of code 

• No need to modify your existing applications 
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Apatar Crashes Data Mashup Party 



BY JEFF FEINMAN 

There is a new player in the 
growing enterprise data 
mashup field, and its name is 
Apatar. The Chicopee, Mass.- 
based company provides a suite 



of software for organizations June its namesake enterprise provides a single interface to 



that need to move data, with 
tools for application integra- 
tion, data migration and ware- 
housing, and synchronization. 
Apatar introduced in late 



data mashup tool, with capabil- 
ities that include connectivity to 
Microsoft Access and SQL 
Server, MySQL, Oracle, Post- 
greSQL, Sybase and XML. It 



manage integration projects, 
and can run on multiple plat- 
forms, including Linux, Mac 
OS X and Windows. 

Apatar is available in two 



tData Dynamics 
Reports 



Go Ahead, Show Off 



Introducing Data Dynamics Reports, a new royalty-free reporting toolkit for 
Microsoft .NET developers. Based on the Report Definition Language (RDL), 
Data Dynamics Reports integrates into Web and Windows Forms applications 
and provides a rich API with which to create and modify reports. 

In addition to the base features provided by RDL, Data Dynamics Reports 
has added several new features to make your reports really shine. 

Go ahead. Show off. With Data Dynamics Reports, you have the tools to 
do it right. 





Sales by Media Type 



Li 

m 



Media Type 


Quantity 


Net Sales 


Net Profit 


DVD 


2,838 


$59,002,43 


$32,046,59 


LaserDisc 


1,953 


$36,199,55 


$20,676,77 


HD-DVD 


199 


$6,154,77 


$2,367,86 


Total 


4,990 


$101,356,75 


$55,091,22 


Media Type 


Quantity 


Net Sales 


Net Profit 


I VHS 


2,733 


$50,410,16 


$29,073,02 


| Total 


2,733 


$50,410,16 


$29,073,02 



Italy $1,609 M 
Brazil $1,492 ■ 
Russia $1,408 M 







Master Reports 

Provide a template containing data sources, data sets, 
and common report items to report authors. 

Data Visualizers 

Data bars, color scales, icon sets, and range bars all help 
explain your data at a glance. 

Barcode 

Save time and money with the included Barcode report 

item. 

It supports 23 of the most popular barcode symbologies, 

from Code39 to UPC, PostNET, and JapanesePostal. 

Enhanced Chart Data Region 

The Chart data region contains many new chart types 
including Gantt, Pyramid, Funnel, and many new financial 
charts. 



Banded List 

The BandedList data region gives the author the ability 
to position items freely as in a List, but with the added 
grouping support of a Table. 

Formatted Text 

Insert XHTML right into your report with the 
FormattedText report item. 

Designer Control 

A designer control is included so your users can create 
reports from within your own application. 

Word Export 

With the included Word rendering extension, you and 
your users can export reports to Word document format 
directly from the viewer without purchasing costly 
components. 



www.datadynamics.com 
(614)895-3142 



5870 Cleveland Avenue 



Columbus, OH 43231 



DATA 
DYNAMICS 



modes: the Apatar Community 
Edition is free, while the Apatar 
Enterprise Edition comes with 
additional features, including 
third-party API support for 
Amazon, Google, Salesforce.com 
and others, as well as consulting 
and integration services, and 
training. 

FORGING A COMMUNITY 

The company also provides the 
on-demand ApatarForge ser- 
vice, which allows users to build 
and publish an RSS/REST feed 
of information from applica- 
tions, Microsoft Excel spread- 
sheets, and news feeds. Apatar- 
Forge is a community where 
open source developers and 
users can publish and share 
data applications in the form of 
DataMaps, which provide fold- 
ers with information about 
entertainment, financial, real 
estate and other newsworthy 
items. 

Apatar was founded after 
the 2005 Open Source Business 
Conference in San Francisco. 
Renat Khasanshyn, CEO of 
Apatar, said that without using a 
tool such as Apatar, a developer 
needs to write a script that 
takes data from a source and 
loads it to a target, which can be 
prone to high costs. With the 
tool, a business manager that 
may not know a specific pro- 
gramming language but knows 
a data schema can design a data 
map using a drag-and-drop 
palette. 

When asked what is unique 
about Apatar s method of creat- 
ing mashups, Khasanshyn said 
Apatar does not deal with the 
front end of the Web site; 
rather, it deals with APIs, con- 
nectors and unstructured data 
such as Excel files. 

"Instead of only trying to 
replicate what already exists in 
the marketplace, we're trying 
not only to develop solutions to 
problems that could be previ- 
ously solved with expensive data 
integration tools, but we're also 
trying to innovate and make 
something useful in a Web 2.0 
environment," Khasanshyn said. 
"Most of the open source prod- 
ucts, if you look at how they 
evolve, they just try to get to 
the same level of features of 
proprietary products. We're 
the first company to say we're 
going to commoditize the soft- 
ware for the integration, but 
we're also going to commodi- 
tize the metadata. We believe 
companies can reduce data 
integration costs by sharing 
metadata on ApatarForge." I 
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LogiXML Plugs Into Web Services 



BY DAVID WORTHINGTON 

LogiXML is now more con- 
nected to the world of Web ser- 
vices. On June 28, it announced 
the availability of Logi Connec- 
tor Pack, an add-on to its Logi 
business intelligence platform 
that integrates data from Web- 
based applications and sources. 
The Connector Pack supports 
integration of data from Sales- 
force. com applications out of 
the box. 

John Kyle, vice president of 
marketing at LogiXML, said 
that the company chose Sales- 
force because it was the most 
popular data source among its 
customers. "Now, using the Logi 
8 platform and the Logi Con- 
nector Pack, you have the ability 
to view your entire business 
operation in a single dashboard." 

LogiXML recently upgraded 
the Logi platform to version 8.1. 
The most pronounced changes 
in Logi 8.1 are improvements to 
ad hoc reporting and event log- 
ging, the inclusion of Google 
Maps, and expanded OLAP 
capabilities and visualization 
tools. 

LogiXML Ad Hoc Report- 
ing now integrates with the 
Logi Mart data layer, which 
resides between the operational 
database and the reporting 
server, to improve data perfor- 
mance and reduce the servers' 
workload. And the parameters 
for ad hoc reports are more cus- 
tomizable. 

Event logging tracks usage 
and logs events to assist with 
troubleshooting issues. In the 
same vein, LogiXML has 
added a centralized metadata 
change-management feature 
that updates and synchronizes 
shared reporting objects. 

X MARKS THE SPOT 

Sometimes, where an event 
happens affects how it will hap- 
pen. LogiXML added Google 
Maps support to its Logi 8.1 
Web-based business intelli- 
gence platform within days of 
Logi 8.1s launch, providing 
customers with a tool for loca- 
tion-based analysis. 

Google Maps allows users to 
visualize and analyze business 
data in terms of geographic 
impact. Addresses may be "geo- 
coded" by latitude and longi- 
tude, to be linked across reports. 

Logi 8.1s OLAP (Online 
Analytical Processing) capabili- 
ties have been extended: users 



may now select multiple 
dimensions at once and apply 
grouping to measures to get 
another view of the data. The 
OLAP data server can now dis- 
play detailed data from the con- 



solidated report view, and drill 
through to related reports. 

A radar chart type is included 
to enable cyclical data compari- 
son within reports; in addition, 
there is an interactive cell bar 



with a color slider feature that 
depicts the high and low range 
of values. Reports can now be 
exported to Microsoft Excel 
without losing images, formula- 
tions and formatting; multiple 



worksheets are supported. 

One of the value proposi- 
tions of Logi 8.1 is report reuse, 
said John Kyle, vice president 
of marketing at LogiXML. The 
reports are actionable and have 
jump-off points to applets. 
Token values may now be used 
to apply universal changes to 
the reports. I 




The perfect tool to create 
and manage websites 



Inspired by end-users. 
Built for developers. 




Developer benefits 

* Extensible architecture, open API 

- Easy integration of A5R NET custom 
control and third party modulei 

* Fully leverages ASP.NET ZO features 



End-user benefits 

* Intuitive Web 2.0 user interface 
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Being Sure About IP Assurance 



Are Linux distros feeling patent pressure? 



TERMS OF LINUX-MICROSOFT ENDEARMENT 



BY DAVID WORTHINGTON 

It is always a good rule of thumb to expect 
the unexpected. On June 14, less than a 
week after the revelation of Microsoft's 
intellectual property agreement with Xan- 
dros, Linspire, a former litigant against 
Microsoft, also made an IP deal. Then 
came the backlash: Debian, Mandriva, 
Red Hat and Ubuntu vowed that they 
would reject any such agreement. 

Linspire s licensing agreement is even 
broader than the software giant s pact with 
Xandros: Customers purchasing a "patent 
SKIT will get a distribution containing 
Microsoft intellectual property. 

The cusp of the agreement is intel- 
lectual property assurance. It establishes 
patent covenants for Linspire cus- 
tomers, and provides rights to Microsoft 
patents that may have been infringed 
upon by Linspire technologies. The 
companies will also collaborate on docu- 
ment interoperability between the 
Office Open XML and Open Document 
Format; Novell and Xandros are also 
contributing. 

Linspire and Microsoft have a con- 
tentious history. Microsoft sued Lin- 
spire — at the time known as Lindows — 
in 2002 on the premise that the brand 
name infringed upon its Windows trade- 
mark. Microsoft ultimately settled the 



case out of court — having lost in the first 
go-around — and paid approximately 
US$20 million to Linspire for a world- 
wide transfer of the trademark. 

On June 4, it was announced that 
Microsoft and Xandros had agreed to 
collaborate on intellectual property 
assurance, Office document compatibil- 
ity and server systems management. The 
companies will also commit to joint sales 
and marketing efforts. 

Under the agreement, Microsoft will 
make patent covenants available to Xan- 
dros customers, and the companies will 
share intellectual property, to accelerate 
deployments of interoperable solutions. 
Xandros is currently licensing Windows 
communications protocols. 

Xandros chief executive officer Andy 
Typaldos said that the deal was forward- 
looking and mainly enhances interoper- 
ability efforts. Typaldos said that the 
companies would build collaborative 
solutions benefiting customers, and that 
Microsoft was focused on building a 
bridge between the worlds of open 
source and proprietary software. 

Directions on Microsoft lead analyst 
Matt Rosoff demurred, stating that the 
main concrete benefit for Linux vendors 
is indemnification against IP lawsuits, 
and that promises of interoperability are 



NOVELL: 

• Microsoft paid US$348 million for patent 
cooperation and SUSE support subscriptions 

• Intellectual property assurance agreement 

• Collaboration on document compatibility and 
virtualization techniques 

• Joint sales and marketing through Microsoft's 
Interop Vendor Alliance 

• A joint research lab to explore interoperability 

LINSPIRE: 

• Undisclosed financial terms 

• Intellectual property assurance agreement 

• Collaboration on document compatibility 

• Linspire is licensing Microsoft digital media, 

at this point just promises. 

Novell started the trend in Novem- 
ber 2006, when it and Microsoft agreed 
to disagree on whether some of Novell's 
open source offerings infringe upon 
Microsoft patents. The companies also 
set up a joint research facility to make 
their offerings more interoperable. 

Under the agreement, Microsoft dis- 
tributes vouchers for support and main- 
tenance of SUSE Enterprise Linux, 
Novell's open source distribution. Nov- 
ell received US$348 million from 
Microsoft for patent cooperation and 
support subscriptions. 

Novell and Xandros are both mem- 



Linux Foundation Urges Compatibility 



< continued from page 1 

3.2 will offer tools that allow developers 
to build once, and deploy to either 
environment. 

Dan Kohn, COO of the Linux Foun- 
dation, said that numerous Linux ven- 
dors have already pledged to adhere to 
the standards proposed in LSB, but he 
conceded that the hundreds of current- 
ly compliant applications pale in com- 
parison to the thousands of applications 
that run on Windows. 

Kay Tate, program manager for 
IBM's Chiphopper application support 
service for Linux, said that Linux's 
current woes aren't entirely due to dis- 
tribution fragmentation. Instead, the 
difficulty is in promoting specific appli- 
cations to corporations, in the same 
way that DB2 or Oracle's databases are 
currently offered. 

"We have great Linux certification 
by distro, and that's the industry expec- 
tation. But being able to do certifica- 
tion at the application level, and teach- 
ing customers to look for that, is 
something that the Linux industry isn't 
used to doing," said Tate. 

Darren Davis, a Linux developer- 
evangelist at Novell, however, said that 
LSB is not currently capable of draw- 
ing in developers on its own merits, 




7 have sent ISVs out to the 
LSB Web site, and they've 
come back screaming that 
they don't know how to use it. ' 

—Darren Davis, 
.'mux developer-evangelist at Novell 



and believes that LSB needs to mature 
and become easier to understand for 
non-Linux developers. "I have sent 
ISVs out to the LSB Web site, and 
they've come back screaming that they 
don't know how to use it," he 
explained. "You need tools to make 
using LSB easier. ISVs do the math and 
look at the market size, and can pick 
one or two distros — and that leaves the 
other distros out in the cold. We need 
LSB to work, to stop it all from being 
dominated by Novell and Red Hat." 

Brian Aker, a developer from 
MySQL who works on the core engine 
of the open source database, com- 
plained that currently there are a 
number of distribution-specific bugs, 
meaning that MySQL must track issues 
on numerous variants of Debian, Nov- 
ell and Red Hat Linux. This makes for 
a lot more work, and he hopes that the 
work being done on LSB will continue 



to simplify the task. 

In the end, howev- 
er, it all comes down 
to the binaries. The 
Linux Foundation's 
Kohn explained that 
the biggest competitor 
to LSB is the good 
old-fashioned make- 
file: Currently, most Linux software 
is distributed as source code, with 
a distribution-specific makefile. Kohn 
said that LSB's overall goal is to make 
the world safe for cross-distribution 
binaries. 

PENETRATION STILL KEY 

Mike Milinkovich, executive director 
of the Eclipse Foundation, agreed with 
Kohn, arguing that penetration is still 
key to Linux's success. But he also 
admitted that the current state of the 
platform makes it tough to target the 
platform exclusively, which is why he 
promotes the use of the Eclipse Rich 
Client Platform, which delivers cross- 
platform applications as well as other 
application frameworks. 

"If you're a startup," said 
Milinkovich, "and the only platform 
you're supporting is Linux, it sucks to 
be you." I 



instant messaging, search and typographic 
patents 

• Linspire will sell a patent SKU bundling those 
technologies 

XANDROS: 

• Undisclosed financial terms 

• Intellectual property assurance agreement 

• Collaboration on document compatibility, serv- 
er interoperability and systems management 

• Joint sales and marketing through Microsoft's 
Interop Vendor Alliance 

• Xandros is licensing Windows communication 
protocols 

—David Worthington 

bers of Microsoft's Interop Vendor 
Alliance, a sales and marketing program. 
"I think that indemnification is part 
of a continuing effort by Microsoft to 
draw attention to the open source intel- 
lectual property situation, and to ham- 
mer home that open source software, 
and specifically Linux, has an uncertain 
pedigree," said analyst Rosoff. "It will 
indemnify against violations in its soft- 
ware and wants customers to question if 
open source vendors will do the same." 

ENTER THE BACKLASH 

In May, Microsoft publicly claimed that 
open source software violates 235 of its 
patents, an accusation that reverberated 
across the open source community. Lin- 
ux vendors — apart from Linspire, Novell 
and Xandros — have made clear that they 
are adamantly opposed to signing intel- 
lectual property assurance deals with 
Microsoft. 

Debian project spokesperson Alexan- 
der Schmehl told SD Times that Debian 
was taking "enormous effort" to ensure 
that the software it distributes satisfies 
its free software guidelines, and is legal- 
ly distributable according to Microsoft's 
copyrights and licenses. 

Schmehl said that Microsoft has not 
attempted to reach a patent indemnifi- 
cation agreement with Debian. He 
noted that Debian's position on software 
patents is that it ignores them — unless 
they are enforced. "We take it as a sign 
of toleration that they are not enforced." 

Frangois Bancilhon, CEO of Man- 
driva, has no qualms: "We don't believe 
it is necessary for us to get protection 
from Microsoft to do our job or to pay 
protection money to anyone," he wrote 
in his company-hosted blog. 

The Red Hat IP team recently pub- 
lished a position paper telling its cus- 
tomers to "deploy with confidence." Red 
Hat provides intellectual property protec- 
tions through its own Open Source Assur- 
ance program, which focuses on indemni- 
fication against claims raised by software 
patent holders. Red Hat will replace the 
continued on page 31 ► 
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Composite Composes SOA Data Services 



BY DAVID WORTHINGTON 

Composite Software believes 
that data services are the best 
solution to access disparate, geo- 
graphically isolated data, and its 
latest product, Composite Infor- 
mation Server (CIS) 4.5, 



released in late June, broadens 
CIS' capabilities to create, pub- 
lish and consume data services 
for SOA and data virtualization. 
CIS creates a middle layer for 
data services within SOA archi- 
tecture and insulates application 



data from business logic. The 
services lasso data together from 
multiple sources, and present it 
in the form denoted by the user. 
Version 4.5 provides connec- 
tivity to more data sources, 
introduces a security platform 



and has improved platform per- 
formance and usability, accord- 
ing to the company. Composite 
Software also offers a supple- 
mental product called Compos- 
ite Active Cluster (CAC) as an 
optional component. 
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Data from Teradata databas- 
es and mainframe data sources 
such as Adabas, IMS and 
V-SAM are now supported. 
Module- and function-level 
security privileges permit 
administrators to define roles 
with corresponding privileges 
assigned to users and groups. 

Composite claims to have 
established a beachhead on the 
platform performance and 
usability front — specifically, by 
accessing horizontally parti- 
tioned databases and running 
queries. 

The performance and relia- 
bility of CIS can be expanded 
with CAC's clustering features. 
CAC can add servers to clusters 
on-demand to extend capacity; it 
also serves as an automatic serv- 
er failover and synchronizes 
metadata — from a centralized 
repository — across cluster nodes. 
A shared cluster cache coalesces 
redundant data source hits and 
reduces data latency. 

CAC's "fire drill" feature 
automates and fail-proofs load 
and failover testing, provides 
capacity planning tools, and vali- 
dates application availability. I 

Uniloc Weighs 
Policy 'Anchor' 

BY JEFF FEINMAN 

Uniloc, a provider of copy-pro- 
tection software, has an- 
nounced SoftAnchor 5.0, which 
adds a "throttling" feature to let 
its users apply varying degrees 
of strictness to licensing poli- 
cies, based on audit results. 

The suite includes the Soft- 
Audit auditing tool, which pro- 
vides real-time statistics about 
how many computers are using 
a user's license or serial number. 

Casey Potenzone, chief infor- 
mation officer for Uniloc, 
explained that flexibility was the 
objective, rather than rigid 
enforcement. "The real benefit 
about it compared to other 
licensing tools is that it's an SDK, 
and we don't mandate any type 
of rules or policies as to how you 
do things. Developers can use as 
much or as little as they want; 
they can use as many tripwires as 
they want. It's really geared to 
make their lives easier." 

Citing research from IDC 
and the Business Software 
Alliance, Uniloc claims that 35 
percent of the software installed 
in 2006 on personal computers 
worldwide was obtained illegal- 
ly, amounting to nearly US$40 
billion in global losses due to 
software piracy. I 
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Fighting Disease 
With Eclipse 

Open source tool for epidemiologists 
brings collaboration to medical world 



BY ALEX HANDY 

Though their studies of disease touch 
every human life, epidemiologists aren't 
into open source. Traditionally, scientists 
in this field have collaborated only 
through the publishing of papers and 
disease propagation models, rather than 
through the development of tooling to 
simplify the number crunching and sim- 
ulation required by the profession. But 
when IBM introduced a new tool for 
epidemiologists that helped to model 
how diseases spread, the community 
that studied open sores was given an 
Eclipse-based dose of open source. 

That introduction was something that 
Dan Ford, a member of the research staff 
at IBM's Almaden facility in San Jose, 
wasn't planning on in 2004 when he took 
over a student project created by interns 
that summer. Those budding technolo- 
gists had cobbled together a Java program 
that could predict how viruses spread by 
using highly accurate population maps, 
which became the Spatiotemporal Epi- 
demiological Modeler, or STEM. 

"The application we've targeted is dis- 
ease modeling, but we were very careful 
to make sure it wasn't specifically just for 
diseases. You can use it to represent any- 
thing that requires space and time," 
claimed Ford. But the biggest challenge 
for STEM isn't in its creation — it's the 
threat that it will actually be needed in an 
emergency some day, he explained. "We 
have a model for the United States which 



has only 53 airports in it" of 514 FAA-des- 
ignated commercial service airports. Dis- 
eases can "move pretty quickly even with 
very limited air travel," he added. 

Today, STEM runs as a Rich Client 
Platform application on top of Eclipse. 
The move saved time and energy, allow- 
ing the project to move forward to its 
June 8 release. Today, STEM is used 
around the world by epidemiologists 
who previously had little collaboration, 
according to Ford. 

UNITING THE INDUSTRY 

"The thing we realized when we first 
released STEM in 2005 was that the dis- 
ease modeling community was very frag- 
mented and really wasn't much of a com- 
munity at all," said Ford. "This was a big 
motivation for us. I remember sitting in a 
disease modeling conference. They do 
not cooperate with one another, the way 
the software industry does. They don't 
share data. This is a problem, because if 
things like pandemic diseases really do 
take off, you need a global effort to deal 
with it. That's not going to come from a 
community that's divided. This really 
motivated us to develop the next version." 
The STEM project is not alone in its 
attempts to unite the medical industry. 
The Open Healthcare Framework pro- 
ject, within the Eclipse Foundation, is a 
movement dedicated to building other 
such medical tools on top of the open 
source platform. I 
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This map of Africa represents the spread pattern of a virus. The red areas indicate varying 
degrees of infection, while the green areas are clean. 
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DreamFactory Straddles Software Marketplaces 

Browser-based IDE enables construction of Salesforce.com, Cisco Connect applications 



BY ALEX HANDY 

With Salesforce.com and Cisco 
Systems division WebEx firing 
salvos of online application de- 
velopment services at each other, 
there's one player in the middle 
that's not fighting to carve up the 
lucrative software-as-a-service 
(SaaS) marketplace. DreamFac- 
tory opened its online develop- 
ment environment to developers 
in June, and the company is 
banking on both SaaS platforms. 
The site (www.dreamfactory.org) 
is currently in beta form, but it 
still allows developers to con- 
struct applications for Amazon's 
S3 services, Cisco (formerly 
WebEx) Connect and the Sales- 
force, com AppExchange. 

DreamFactory currently 
earns most of its revenues from 
Salesforce. corn-based applica- 
tions constructed with its tools. 
The company does not charge 
for access to its new online IDE, 
but does collect a percentage of 
the profits gleaned from applica- 
tions created by users. The com- 
pany hopes this free-to-use busi- 



ness model will help to increase 
the appeal to independent 
developers who are looking to 
the AppExchange as a market- 
place for their wares. 

Ken Neff, vice president of 
products and services at Dream- 
Factory, said that the new edi- 
tion of the company's IDE offers 
a consolidated and collaborative 
central location for construction 
applications in JavaScript, Visual 
Basic or the company's own pro- 
prietary DreamFactory Script. 

Neff said that the Dream- 
Factory IDE has evolved to 
become a platform-neutral envi- 
ronment, thanks to the addition 
of support for Cisco Connect 
and Amazon's S3 online storage 
service. Neff said that each of 
these services offers a unique 
advantage over the others. 

"Salesforce is far and away 
the most mature. We make the 
bulk of our revenue from Sales- 
force," said Neff. "We think 
that Cisco Connect is going to 
be very large. We think it has 
huge potential. It brings in 
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DreamFactory takes development of SaaS applications into the browser with its online IDE. 



[tele-] presence in ways that tra- 
ditional applications haven't 
thought about. WebEx is a col- 
laboration company, after all. 
While we've ported our appli- 
cations to Connect, we'll really 
be tailoring to the platform over 



time. Amazon's S3 is the cheap- 
est place on earth to store data. 
It costs [US] $50 per gigabyte of 
storage on Salesforce. Amazon 
charges 15 cents. We see that as 
an untapped resource." 

The DreamFactory beta is 



online now and should be ready 
for final release later this year. 
DreamFactory hosts all projects 
on its sites, but can export the 
final binaries as MIME encoded 
files, ready for upload into any of 
the supported hosted services. I 
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IBM Research: Extending Java, SML Boundaries 



BY DAVID WORTHINGTON 

IBM's Thomas J. Watson 
Research Center campus in 
Hawthorne, N.Y., is a technolo- 
gy wonderland. Like a trip to 
the Wonka candy factory, the 
honeycombed hallways conceal 
a plethora of projects. 

One modest office is occu- 
pied by a man with big plans. 
Vijay Saraswat is at the helm of 
an effort to create a new pro- 
gramming language called X10, 
designed to tackle the challenges 
of multicore programming. The 
XI project is funded in part by 
DARPA, with the goal of opti- 
mizing the use of the very largest 
computing systems. 

Saraswat describes X10 as "a 
radical incrementation" of 
sequential Java for parallel 
hardware, which builds on 
existing compilers, libraries, 
runtimes, tools and virtual 
machines. It offers a program- 
ming model for concurrency 
and distribution that centers on 
the concept of the X10 place. 

Places combine lightweight 
threads, or activities, with data, 
and maps to a data-coherent unit 



in an SMP node or processor 
core. XI programs can make 
use of parallelism at the cluster 
level, by creating multiple X10 
places. An example of an XI 
place is a Java heap where 
objects are created. In nonparal- 
lel languages, threads operate on 
the same heap. At scale, 
Saraswat explained, that method 
doesn't work, so XI provides 
many computation heaps. 

The latest iteration of XI is 
available on SourceForge. 

IBM researcher Tamar 
Eilam then presented "Rainfor- 
est," a SOA life-cycle manage- 
ment project that began in 
2003. Rainforest is designed to 
drastically reduce the time that 
is devoted to test environment 
configuration, by using SML 
(Service Modeling Language) 
to bridge the knowledge gap 
between IT development and 
operations. 

According to Eilam, Rain- 
forest Deployment Planner uti- 
lizes models, patterns and 
domain validation and resolu- 
tion logic, to interactively gen- 
erate a physical deployment 



topology. Models represent 
knowledge, and templates 
ensure compliance, bringing 
roles together. 

IBM Researcher Mukund 
Raghavachari then gave an 
overview of XJ, an initiative to 
integrate Java with XML that 
aims to bring the benefits of 
PHP and Ruby to existing Java 
code. XJ leverages a specialized 
javac compiler that includes 
XPath (XML Path Language) 
support, to address certain 
parts of XML documents. 

Raghavachari said that XJ 
provides Java developers with 
an alternative that outperforms 
DOM (Domain Object Model) 
and eases programming by 
returning errors that would oth- 
erwise pass unnoticed. 

Raghavachari explained that 
DOM stores entire XML docu- 
ments in memory — reducing 
performance — because it lacks 
information that XJ provides to 
the compiler along with docu- 
ment schemas. "XJ knows static 
queries and what parts it needs; 
DOM [used] in XPath looks at 
the entire schema and stores the 



entire document in memory." 

Raghavachari noted that 
IBM did not have to change the 
JVM to add this feature. Rather, 
XJ automatically generates opti- 
mized DOM, so that the devel- 
oper does not have to write it. 

XJ also has Web services 
support dubbed XJ/WS, which 
is available at IBM alphaWorks. 
XJ/WS can extract data from a 
data stream and conform data 
for consumption by a Web ser- 
vice using schemas. Ragha- 



vachari said that it was akin to a 
"Web-service service." 

Raghavachari demonstrated 
how XJ interacted with Web 
services during a demo. Using 
fewer than 80 lines of code, 
he created a Google Gmail- 
plus-Amazon mashup that 
retrieves mail as an RSS feed, 
finds messages with the word 
"book" in the body summary, 
and then invokes Amazon's 
ItemSearch Web service to look 
up book titles. I 



IBM MAKES REAL-TIME FLY 



< continued from page 3 

Real-time Threads and Exo- 
tasks to provide a framework 
for microsecond-level latency 
and time portability within 
applications. 

Metronome's ability to scale 
for commercial hard real-time 
systems depends on when 
AMD will release new multi- 
core processors that IBM can 
certify, because for now, IBM's 
hard real-time systems run only 
on AMD CPUs. Bacon noted 
that IBM's mainframe legacy 



has given it the know-how to do 
next-generation multicore, and 
that a PowerPC implementa- 
tion is forthcoming, but he 
would not say when. 

Red Hat will provide a real- 
time edition of Red Hat Enter- 
prise Linux 5 that is slated for 
release next year. IBM has part- 
nered with Red Hat to produce 
a soft real-time solution based 
on Red Hat Linux. Someday, 
Bacon predicted, real-time 
capabilities will get into the 
mainline Linux kernel. I 
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Borland SilkCentral Integrates With VMware 



BY JEFF FEINMAN 

Borland Software was expected 
to announce on July 9 the newest 
version of its automated software 
test management tool, SilkCen- 
tral Test Manager 2007, which 



will add the ability to integrate 
with VMware Lab Manager. 

SilkCentral Test Manager 
2007 delivers support for virtu- 
al lab environments, and allows 
a user to run a test across mul- 



tiple configurations in an auto- 
mated fashion, while VMware 
Lab Manager provides the abil- 
ity to create a test run that 
works across multiple platforms 
and configurations, without the 



need to set up multiple virtual- 
ized images. The combination 
of the two is meant to reduce 
the time and cost constraints of 
maintaining test labs. 

The newest version of Silk- 
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Central Test Manager also 
offers enhanced requirements- 
based testing capabilities that 
improve the tool's usefulness 
with Borland's Caliber require- 
ments management software, 
according to Brad Johnson, 
director of product marketing 
for Borland. 

Johnson said that with Bor- 
land's "Open ALM" approach — 
the ability to use any combina- 
tion of life-cycle tools and 
catering to a broad range of 
platforms — the company is try- 
ing to help customers improve 
efficiency and costs within the 
delivery of software. 

"Other companies do offer 
virtual lab management soft- 
ware in the marketplace, but 
VMware is the leader," John- 
son said. "About one-third of 
our customers have told us 
that they're using VMware, 
and we figure if we go after 
that percent of our market that 
has VMware in their environ- 
ment, I think we're going to do 
very well." I 

Terracotta 2.4 
Eases Clustering 
Of Java Apps 

BY ALEX HANDY 

Terracotta updated its flagship 
Java application clustering plat- 
form to version 2.4 in mid-June, 
adding support for clusters 
of servers running IBM Web- 
Sphere and the open source 
Hibernate object-relational 
mapping and persistence frame- 
work. Terracotta 2.4 also adds 
wizards that can help automate 
the process of clustering a Java 
application. 

"Terracotta has super- 
charged its ability to deliver 
scalable high availability to 
users who are adopting an ever- 
expanding variety of frame- 
works, and support for Web- 
Sphere and Hibernate," said 
Ari Zilka, CTO and co-founder 
of Terracotta. "This rapid devel- 
opment is driven by the config- 
uration modules we introduced 
in April to support easy integra- 
tion, and has been a tremen- 
dous benefit for the Terracotta 
user community." 

Terracotta's clustering solu- 
tion was made open source ear- 
lier this year, and is available 
online at www.terracotta.org. I 
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Do Linux Vendors Feel Patent Pressure? 



< continued from page 18 

software under an intellectual 
property warranty, if there is an 
intellectual property issue. 

Mark Shuttleworth, head of 
the Ubuntu Foundation and 
CEO of Canonical, noted in his 
blog that his company had no 
negotiations in progress with 
Microsoft, without noting 
whether any had taken place. 
Shuttleworth said that the 
foundation would decline to 
discuss any agreement with 
Microsoft under the threat of 
unspecified patent infringe- 
ments, which he said carries no 
weight whatsoever. 

"A promise by Microsoft not 
to sue for infringement of 
unspecified patents has no val- 
ue at all and is not worth paying 
for. It does not protect users 
from the real risk of a patent 
suit from a pure-IP-holder 
(Microsoft itself is regularly 
found to violate such patents 
and regularly settles such suits). 
People who pay protection 

SourceGear Adds 
Visual Studio Ties 

BY JEFF FEINMAN 

SourceGear is tying its version 
control software ever closer to 
Microsoft's .NET platform. The 
company recently announced 
an update to Vault, its version 
control system, as well as a 
brand-new product, Fortress, 
an ALM solution for small and 
midsized teams. 

SourceGear Fortress 1.0 
offers version control and work 
item tracking features that inte- 
grate with Microsoft Visual Stu- 
dio 2005, and Visual Studio 
2008 when it is released. It also 
has an Eclipse 3.2 plug-in. 

Built on Microsoft SQL Serv- 
er, the .NET Framework and 
Internet Information Services, 
Vault uses components that 
Microsoft developers know inti- 
mately. Vault 4.0 now integrates 
with Visual Studio, and offers 
browser-based configuration and 
management of the Vault server. 
Vault 4.0 also integrates with 
Eclipse 3.2, and provides a Java- 
based command-line client app. 

"In five years of talking with 
users about Vault, the most 
important thing to our cus- 
tomers is that we provide excel- 
lent integration with Microsoft 
Visual Studio," said Eric Sink, 
SourceGear founder. I 



money for that promise are 
likely living in a false sense of 
security," Shuttleworth wrote. 

Shuttleworth dismissed all 
of the deals announced so far, 
writing, "They strike me as 



'trinkets in exchange for air 
kisses.' Mwah, Mwah. No 
thanks." But Shuttleworth, 
along with Mandriva's Bancil- 
hon and Debian's Schmehl, 
acknowledged the importance 



of interoperability between 
Windows and the Linux world. 
Directions on Microsoft's 
Rosoff remarked that the con- 
sequences of Microsoft's suing 
anybody — customer or ven- 



dor — would carry a lot of risk. 
It would risk alienating some of 
its largest customers that run 
both Linux and Windows, and 
the bad publicity could alienate 
a new generation of software 
developers, he said. 

"It would be colossally stupid 
[for Microsoft] to pull the trig- 
ger," Rosoff said. I 
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Is Enterprise Architecture 

Simpler approach boosts business alignment, 



BY JENNIFER DEJONG 

The idea behind enterprise architec- 
tures is a good one. Drafting a plan for 
an organizations widely dispersed busi- 
ness processes, technologies and infor- 
mation reduces the complexity of those 
systems, ensuring that new projects fit 
into the big picture and deliver what the 
business wants. 

But according to a consultant and 
author who has spent a good part of his 
career poring over such enterprise archi- 
tecture plans, it hasn't worked out that 
way 

"Things have gotten worse and worse 
since the field of enterprise architecture 
emerged 20 years ago," said Roger Ses- 
sions, chief technology officer of IT con- 
sultancy ObjectWatch. Systems are 
more complex than ever before, and IT 
is still delivering applications that fail to 
do what they are supposed to do, he 
said. That has created a culture of dis- 
trust between IT and business. "Each 



side is very focused on its own problems. 
They rarely meet. That is how bad things 
have gotten." 

But Sessions has architected a plan 
he believes will bring the two parties 
into alignment. The key is thinking 
small, partitioning the organization into 
narrowly defined areas of business need, 
instead of attempting to define the 
architecture for the entire company, said 
the author of the forthcoming book 
"Simple Architectures for Complex 
Enterprises," expected by year's end. 
"Don't try to merge business and IT at a 
high level," he said. "You have to create 
an environment that is much simpler to 
deal with, and then invite both parties to 
collaborate around that need." 

Areas of business need — which Ses- 
sions calls components — include things 
such as inventory control and managing 
the sales process. There is technology 
around selling, and there are business 
processes around selling, and the same is 




TOP FOUR ENTERPRISE ARCHITECTURE 
METHODOLOGIES 



Roger Sessions, CTO of ObjectWatch and author of the forth- 
coming book "Simple Architectures for Complex Enterprises," 
analyzed the enterprise architecture methodologies that 
have emerged since the field was named 20 years ago. He 
chose the following four not because they are the only 
approaches in use today, but because they accurately repre- 
sent the complete spectrum of enterprise architecture. 

The Zachman Framework for Enterprise Architecture: J.A. 
Zachman launched the field of enterprise architecture with the 1987 publication of 
"A Framework for Information Systems Architecture," in IBM Systems Journal. His 
framework is essentially a taxonomy for organizing architectural artifacts, such as 
design documents, specifications and models. The approach takes into account 
whom the artifact targets (for example, business owner and builder) and what par- 
ticular issue (for example, data and functionality) is being addressed. 

The Open Group Architectural Framework (TOGAF): More of a process than a frame- 
work, TOGAF divides an enterprise into four categories: business architecture (for 
describing business processes), application architecture, (how applications are 
designed and how they interact), data architecture (how enterprise data is orga- 
nized and accessed), and technical architecture (how the software and hardware 
infrastructure supports applications and their interactions). TOGAF is complemen- 
tary to Zachman: Zachman tells you how to categorize your artifacts; TOGAF gives 
you a process for creating them. 

The Federal Enterprise Architecture (FEA): Still in its infancy, FEA is the latest 
attempt by the federal government to unite its agencies and functions under a sin- 
gle enterprise architecture. Most of the major pieces have been available only since 
2006, but FEA provides both a comprehensive taxonomy, like Zachman, and an 
architectural process, like TOGAF. FEA can be viewed as either a methodology for 
creating an enterprise architecture, or the result of applying that process to a par- 
ticular enterprise. 

The Gartner Methodology: This approach from the research firm Gartner is best 
described as an enterprise architectural practice, and is based on the idea that archi- 
tecture is a verb, not a noun. In other words, the ongoing process of creating, main- 
taining and, especially, leveraging an enterprise architecture is what gives an enter- 
prise architecture its vitality. Otherwise, an architecture is simply a bunch of artifacts. 
Gartner believes that enterprise architecture brings together three constituents: 
business owners, information specialists and the technology implementers. 

Source: "A Comparison of the Top Four Enterprise-Architecture Methodologies," by Roger Sessions, May 2007. 
(msdn2.microsoft.eom/en-us/library/bb466232.aspx#eacompar_topic4) 
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the Answer? 



author says 



true for inventory, he said. "You have to 
bring these things together and get the 
right people talking to the right people." 
The methodologies of traditional 
enterprise architectures (see box) include 
some useful ideas, said Sessions. The 
Zachman Framework for Enterprise 
Architecture, for example, provides a tax- 
onomy for organizing architectural arti- 
facts, and The Open Group Architectural 
Framework offers a process for creating 
an architecture. The problem is that 
these approaches have changed little in 
the past decade. They have essentially 
stood still, while the systems companies 
are trying to build, and the business envi- 
ronment itself, have grown exponentially 
more complex, said Sessions. 

COMPLEXITY IS A DISEASE 

"On the business side, there are new reg- 
ulatory requirements, such as Sarbanes- 
Oxley, and new partnerships. On the 
technology side, there are new 
[approaches] such as service-oriented 
architecture and business process man- 
agement." Those issues can't be solved 
with a "managing complexity" mindset, 
he said. "Complexity is not an issue to be 
managed. It is a disease to be destroyed. 



We need entirely new strategies for elim- 
inating complexity from IT systems." 

How does a company embark on a 
simple architecture approach? High-level 
leadership is the first step. "Without that, 
you can't get the groups to do the things 
they need to do," said Sessions, referring 
to small teams of business and IT profes- 
sionals organized around specific busi- 
ness functions, such as inventory control 
and point-of-sale. A key characteristic of 
companies succeeding at the simple 
architecture approach is a high-level 
belief that the technology and business 
groups must be partners, he said. "You 
have to build up a culture of cooperation, 
complete some successful projects quick- 
ly, with low risk, and high perceived busi- 
ness value. You don't want to fail." 

But that culture is difficult to develop, 
said Sessions. Business people have seen a 
lot of IT system rollouts that don't meet 
their needs. They say that they would 
rather buy a system than have it devel- 
oped in-house. At the same time, technol- 
ogy professionals believe the business is 
making unreasonable demands, he said. 

"I have worked in IT at a number of 
companies, and there is a painful recog- 
nition looking back over my career: A 
large percentage of projects were fail- 
ures." They happened because the high- 
level IT people making decisions were 
not hooked into their business counter- 
parts, he said. "But [as developers] we 
were doing what we were told to do." I 



OASIS Ratifies New SOA Standards 



BY DAVID WORTHINGTON 

The OASIS international standards con- 
sortium went into approval frenzy in late 
June, as its members voted to approve 
Content Assembly Mechanism (CAM) 
1.1 and WS-ReliableMessaging 1.1 as 
standards, paving the way for greater 
industry adoption of the two. 

OASIS describes CAM as an XML- 
based system for using business rules to 
define, validate and compose specific 
business documents from generalized 
schema elements and structures. CAM 
was approved as a standard on June 19. 

"CAM has been described as a Swiss 
Army knife for XML structures," said 
David Webber, chair of the OASIS Con- 
tent Assembly Mechanism Technical 
Committee. "That's because CAM 
addresses the three issues that are crucial 
for automated information integration. It 
delivers the capability to design transac- 
tions consistently, to document their 
usage clearly, and to drive software that 
can apply rules and test information con- 
tent correctly." 

XML data frequently needs to be val- 
idated and transformed before a Web 
service can exchange XML between 
apps, said David Gannon, president and 
CEO of OASIS. CAM enables that via 
templates, permitting contextual business 
rules to be applied to any XML structure, 
he explained. 



WS-ReliableMessaging is a member of 
the WS-* family and has been adopted by 
companies including BE A, IBM, 
Microsoft, Novell, Oracle and Sun in their 
respective SOA platforms. It makes prod- 
ucts from different vendors interoperable, 
by incorporating SOAP binding and allow- 
ing additional bindings to be defined. 
OASIS gave it the nod on June 21. 

WS-ReliableMessaging provides a 
mechanism for messages between appli- 
cation components to be transferred 
reliably, even when networks, software 
and system components fail. The mech- 
anism identifies, manages and tracks 
messages when they are transferred 
between a source and destination, said 
Paul Fremantle, co-chair of the techni- 
cal committee. There are multiple facil- 
ities to back up and replicate messages. 

WS-ReliableMessaging also integrates 
with the WS- Security standard to keep 
away prying eyes, and is likewise extensi- 
ble by the other WS-* specifications. 

SAP's Sanjay Patil, co-chair of the 
OASIS WS-RX Technical Committee, 
said in a statement: "WS-ReliableMessag- 
ing delivers a key element in the openness 
of an enterprise service-oriented architec- 
ture and provides a critical building block 
that can be used in conjunction with oth- 
er specifications and application-specific 
protocols to reliably handle a wide variety 
of SOA requirements and scenarios." I 
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applications to access ALL your data? 

Only 1 tool is needed, /^cSSfibc 
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Without CONNX, you are required to write a custom application to access legacy 
and/or relational data, which is . . . 

► Limited to only that application. 

► Dependent on the creation of custom reports in order for the data to be 
accessible to the end user. 

► Costly and time consuming to write and maintain. 



With CONNX 
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CONNX... 




► Uses a single metadata model that spans virtually all your legacy and relational 
enterprise data sources. 

► Offers SQL access to all your legacy and relational data sources via ODBC, 
OLE DB, JDBC and .NET. 

► Includes InfoNaut, a desktop/query reporting tool, allowing the end user to 
instantly view data and create their own reports, increasing IT productivity. 

► Can be used with virtually any tool that is compatible with the APIs listed above. 



CONNX is... 



*► REALTIME 

Access data directly from transaction databases and multiple disparate databases 
while preserving data integrity. 
t» ROBUST 

CONNX takes advantage of resources on both the backend host and the 
middleware server or client PC. 

► SCALABLE 

The CONNX distributed SQL engine design enables unmatched performance 
from the single project to enterprise initiatives. 

► SECURE 

CONNX respects all existing database security and provides additional user 
group, row, field, table and database security. 

► A MONEY AND TIME SAVER 

CONNX significantly reduces the time required to generate ad hoc reports. 
Clients report saving as much as $10,000 per report per month. 
t> EASY TO INSTALL AND FAST TO LEARN 

Installation and use of CONNX is made easy through the user- friendly CONNX 
Data Dictionary GUI and the InfoNaut SQL Query Builder. 

The full CONNX Solutions product line will empower you with data access, data integration, 
ad hoc reporting, web enablement and change data capture tools. 

To see CONNX in action, take a test drive at www.connx.com/action. 

To find out more about CONNX, call 888.88CONNX or e-mail sales@connx.com. 
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Introducing Time-lapse View, 

a productivity feature of Perforce SCM. 
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Perforce 

SOFTWARE 



Download a free copy of Perforce, no questions 

asked, from www.pei4orCB.corn. Free technical support is 
available throughout your evaluation. 



www.sdtimes.com 



. Software Development Times . July 15, 2007 



NEWS 



35 



HP Brings Security Into Life Cycle 



< continued from page 1 

collaborated with Borland, but 
its current partners include 
IBM and Mercury Interactive 
[now a subsidiary of HP]." 

Other companies in the 
space include Compuware, 
Fortify, Klocwork, Ounce Labs 
and RSA Software. 

According to Brink, cus- 
tomers are demanding rigor in 
the software development life 
cycle. Aberdeen's recent re- 
search on application security 
indicates that 30 percent of 
enterprise companies already 
use security-focused code devel- 
opment tools, with an additional 
16 percent planning to imple- 
ment them within a year. 

The need for security- 
focused tooling is apparent: 
Half of those surveyed by 
Aberdeen responded that their 
current coding practices were 
insufficient to address their 
security needs for internally 
developed applications. 

Although further security 
acquisitions are expected, 
Rende claimed that HP was not 
trying to become a security ven- 
dor, arguing that security 



assessment and vulnerabilities 
are synonymous with defects. 
"Security assessment falls 
under the quality side of our 
business." He added that HP 
views software development as 
one of its growth engines. 

"This adds a new chapter to 
the applications side of the 
house," said Rende. "We think 
of applications and operations 
working together, and this adds 



the piece of security assess- 
ment from early on in the 
[software development] life 
cycle all the way through to 
production." 

SPI Dynamics CEO Brian 
Cohen noted that the deal 
should come as no surprise to 
customers, claiming that the 
company has always been up 
front about the high probability 
that security assessment tools 



would become a motivating 
force for acquisitions. "The ulti- 
mate success is to see this stuff 
fully integrated [into the life 
cycle]," he said. 

SPI's products include Dev- 
Inspect, QAInspect and Web- 
Inspect; these run throughout 
the life cycle of Web applica- 
tions to identify security vul- 
nerabilities and integrate with 
HP Quality Center software. 



The products also provide fea- 
tures that help organizations 
meet auditing and compliance 
requirements. 

Cohen said that 60 percent 
of the SPI customer base 
already use Mercury tools, and 
added HP would not reduce 
platform support, thereby 
reducing its appeal to testers, or 
unduly meddle with SPI's exist- 
ing research operations. I 



HP Shows Its Hand at Las Vegas Triple Play 



BY JEFF FEINMAN 

Last month in the land of casi- 
nos and spectaculars, Hewlett- 
Packard held a three-ring event 
of its own, hosting three confer- 
ences at the same time. 

HP Technology Forum, HP 
Americas StorageWorks Con- 
ference and HP Software Uni- 
verse ran from June 18-21 in 
Las Vegas, kicking the compa- 
ny's summer into gear amidst 
the ambient sounds of high 
rollers and slot machines. 

While HP's biggest news 
came with the acquisition of 
Web application security 



assessment software and ser- 
vices provider SPI Dynamics, 
the company did release a new 
set of compliance-focused tools, 
and an update to its quality man- 
agement suite. 

The new HP Secure Advan- 
tage tools are meant to protect 
data and resources, and validate 
regulatory compliance through 
the IT process. A main feature of 
Secure Advantage is the Compli- 
ance Log Warehouse, which col- 
lects and analyzes data in order 
to automate compliance report- 
ing for industry standards, 
including the PCI payment card 



requirements. The Compliance 
Log Warehouse analyzes securi- 
ty data as part of internal and 
external audits, and scans log 
record data to ensure policies are 
followed. Another important 
part of the portfolio is HP Iden- 
tity Center, which is an identity 
and access management tool that 
automates security compliance 
and management across dis- 
parate systems. 

"HP Secure Advantage 
delivers integrated security into 
heterogeneous IT infrastruc- 
tures to help customers opti- 
mize business outcomes," 



explained Scott Stallard, senior 
vice president of enterprise 
storage and servers for HP. 

Also announced during HP's 
Las Vegas conferences was an 
update to HP's Quality Center, 
adding business requirements 
and quality management capa- 
bilities that are integrated into a 
real-time system. HP Load- 
Runner, the load testing and 
Web performance testing soft- 
ware acquired with Mercury 
Interactive last year, has been 
updated to offer performance 
testing of SO As and rich Inter- 
net applications. I 



C++ Revision Gathers Steam for '09 Release 



< continued from page 1 

language. At the same time, the 
C++ core isn't carved in stone. 
According to Stroustrup, one of 
the purposes of this review is to 
remove errors and inconsisten- 
cies from the core. 

Herb Sutter, convener of 
the C ++0x working group, ex- 
plained that among the main 
enhancements are support for 
concurrency and multithread- 
ing, and the addition of 
garbage collection. Also mak- 
ing his hot list are extensions to 
the standard library, including 
support for hash containers, 
regular expressions and smart 
pointers. Although many ven- 
dors ship support for these and 
other prestandard functions in 
their STL (Standard Template 
Library) packages, this upcom- 
ing release will mark their offi- 
cial move from the TR1 library 
to the official C++ standard 
library. 

NEW 'CONCEPTS' 

Speaking of templates, both 
Stroustrup and Sutter agree 
that the new "concepts" feature 
may be just what developers 



have been looking for. This 
introduces a typing system for 
templates, meant to eliminate 
confusing error messages. 

As Sutter explained, when 
using "STL algorithms that 
require iterators, if you pass it 
an integer instead, today you get 
reams of error messages. Now 
with concepts, you'll simply get, 
'Hey, [12] is not an iterator,' 
which is way more usable. That 
in one fell swoop solves 90 per- 
cent of the usability issues of 
templates, while retaining all of 
their power, and adds to that 
power as well. It lets you do 
some things like overloading 
that you couldn't do with tem- 
plates before." 

Stroustrup noted, "It's actual- 
ly quite tricky to get this to work, 
because templates and generic 
programming [have] become the 
major players in the high-perfor- 
mance [market], with high-per- 
formance computers, or close to 
[the] hardware on embedded 
systems. Performance is incredi- 
bly important. We can't solve our 
problems by introducing more 
dynamic stuff." 

Performance is also a con- 



C++0x TIMELINE 




Content & 
Comments 


To Publish 
In 2009 


To Complete Work 
in 2009 


Regis- 
tration 
Ballot 


Ideally all major 
features present. 
Usually few 
comments. 


Vote out draft at 
end of this meeting. 


Vote out draft at 
end of this or next 
meeting. 


Draft 
Ballot 


All major features in 
near-final form. Need 
time for disposition 
of comments. 


Vote out near-final 
text at October 
2007 working group 
meeting. 


Vote out near-final 
text at October 
2008 working group 
meeting. 


Final 
Ballot 


Final text 


Vote out final text at 
October 2008 work- 
ing group meeting. 


Vote out final text at 
October 2009 work- 
ing group meeting. 

Source: Herb Sutter 



cern, noted both of the C++ 
pathfinders. Although C++ is 
already considered by some to 
be a high-performance language, 
Sutter observed that the 
improvements in C++0x have so 
far exceeded expectations. 

The new R-value references, 
also known as "move construc- 
tion/assignment" semantics, 
allow the use of disposable 
objects, and Sutter explained, 
"are a great technique for avoid- 
ing costs of copies automatically. 
That's going to have a good effect 



on performance, even [with] 
existing applications, as move- 
semantics-enabled libraries, R- 
value reference-enabled librar- 
ies, become available and use 
that feature of the language," he 
predicted. 

Stroustrup and Sutter are 
both excited about the features 
designed to help developers 
take advantage of new multi- 
core processors designs, 
including support for concur- 
rency and multithreading and 
support for garbage collection. 



"Those are the other big-ticket 
items," Sutter noted. "For con- 
currency, that doesn't just 
include threads and locks, but 
also things like thread pools 
and futures, and also a world- 
class state-of-the-art memory 
model as well." 

Stroustrup explained, "Every- 
body uses threads. It may well be 
the worst possible way of using 
concurrency in a system, but 
everyone's using them and 
they're built into the system, so 
we must support that." 

"It's parity, or in some cases, 
better than what Java currently 
has [or] what .NET currently 
has," Sutter claimed. "Those 
three will be on a level playing 
field. People are already writing 
multithreaded code for C + + 
anyway, but because the stan- 
dard doesn't say anything about 
threads, it requires you to do 
system-specific stuff. So the 
main news here isn't, 'Hey, I can 
write multithreaded code in 
C++,' [because] everybody does 
that today. The news is that I 
can write portable code that will 
run on all these different sys- 
tems and compilers and has 
first-class concurrency support, 
equal to what you would find in 
other modern languages." I 
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NetAdvantage for Windows Forms 



Multi-Platform User Experience 



NetAdvantage 

Empower your passion for creating great user interfaces with NetAdvantage 




Empower Your Users - Deliver highly productive, feature rich user interfaces to your 
customers, for Windows Forms, ASP.NET, WPF or JSF 

Leverage Reusable Architectures - Standardize your development process with consistent 
frameworks and tooling (source code included) 

Insure Consistent Look & Feel - Apply global Application Styling™ to brand applications 
across the enterprise (professionally designed style packs included or create your styling 
according to your corporate standards) 

Access Global Support - Interact with teams in London, New York, Tokyo, and Bangalore 
for intelligent code-level product support, via phone, email or 24 hr chat 

Maximize Your Results - Infragistics also offers Ul testing tools for NetAdvantage-powered 
applications, as well as comprehensive mentoring, training and consulting services 



Infragistics 

Powering The Presentation Layer 



learn more: infragistics.com 

Infragistics Sales - 800 231 8588 

Infragistics Europe Sales - +44 (0) 800 298 9055 



Your enterprise partner for user interface development 
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Wind River Releases Cross-Platform Network Stack 
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BY P.J. CONNOLLY 

Device developers looking for a 
way to add networking capabili- 
ties to their creations may find a 
recent announcement from Wind 
River Systems interesting. The 
company released in June its 
Advanced Networking Technolo- 
gies middleware portfolio, incor- Source: wind River s y $tems 
porating the company's base of The aim of Wind River's networking portfolio is to simplify 
networking tools with technology application and device development by providing a common 
acquired through its purchase of communications framework. 
Interpeak AB in March 2006. 




Wind River s goal with the networking 
portfolio is to simplify application devel- 
opment for both its VxWorks and Wind 
River Linux platforms, by providing a 
common support platform for network 
functions, including IPv6, management, 
quality of service, routing, security and 
cryptography, and wireless networking. 

Isidro Gonzalez, senior product mar- 
keting manager at Wind River, outlined 
the challenges facing developers: 
"Devices in general are becoming more 
and more about providing rich content; 
there's serious network convergence," 
he explained. "You have competitive 



pressures, so you want to have a differ- 
entiated product, but time-to-revenue is 
important, cost is important," he added. 

However, if making developers' lives 
easier is a priority, so is making it easier 
to deploy and control embedded sys- 
tems. Gonzalez noted that device man- 
agement is still primitive: "The embed- 
ded device industry is where the IT 
industry was 15 years ago, before you 
had OpenView and Tivoli. We want to 
make this more efficient, so that cus- 
tomers can optimize their business 
investment, their people and their tools." 

According to the company, there 



Sybase Solution Gets LDAP 



BY P.J. CONNOLLY 

Integrated LDAP support, added to exist- 
ing support for Windows authentication, 
makes it possible for users of the recently 
announced M-Business Anywhere soft- 
ware to create identity-based solutions 
that use either Microsoft's scheme or the 
LDAP method that is ubiquitous in Linux 
and Unix environments. 

M-Business Anywhere, released by 
Sybase on June 25, is available in stan- 
dard and professional "Web" editions, 
which focus on content delivery and data 
collection applications, respectively. 
Web Edition Pro allows developers to 
use dynamic HTML for interface design 
and JavaScript for on-device business 



logic, and offers a plug-in architecture 
for expanding services. At the top of the 
pile is the M-Business Anywhere Appli- 
cation Edition, which offers XML data 
synchronization for Web applications 
and on-device database access. 

M-Business Anywhere version 6.5 
also offers a new synchronization 
process that the company claims allows 
failure recovery as part of a seamless 
user experience. Tools for developing 
mobile forms also are available. 

M-Business Anywhere works with 
devices running Palm OS 4.x and later, 
Pocket PC 2003, Windows Mobile 5. 
Windows XP and Windows XP Tablet 
Edition. I 



XILINX UPDATES FPGA DESIGN TOOLS 



BY P.J. CONNOLLY 

Xilinx announced the immediate availabil- 
ity of an updated version of its Integrated 
Software Environment (ISE) design tools 
on June 25. The ISE 9.2i release adds 
support for Microsoft's Windows XP x64, 
Windows Vista and Red Hat Enterprise 
WS 5.0 on both 32- and 64-bit platforms, 
and uses the company's SmartCompile 
technology to preserve design logic while 
cutting implementation runtimes. 

The San Jose-based maker of pro- 
grammable logic solutions claims that it 
was able to reduce memory consump- 
tion in the new tools by 27 percent, 
while at the same time improving per- 
formance by up to 15 percent through 



the adoption of new place-and-route 
and clock algorithms. According to the 
company, the relaxed memory require- 
ments will allow systems designers to 
use Windows XP's 32-bit edition in their 
work with higher-density field-program- 
mable gate arrays (FPGAs), instead of 
the less-common 64-bit OS variant. 

Xilinx is targeting the tools for the 
company's new 65nm Virtex-5 FPGAs 
for high-performance applications, and 
the Spartan-3 line of 90nm FPGAs for 
high-volume implementations. The ISE 
9.2i design suite can be paired with the 
company's updated ChipScope Pro 
debug and verification software and the 
ChipScope Pro Serial IO toolkit. I 



were a number of reasons to 
replace the native Linux network- 
ing stack. Its goals were to add fea- 
tures necessary for the embedded 
device market, reduce the memo- 
ry footprint of the stack, retain 
intellectual property, and support 
the deployment of applications on 
non- Linux platforms, particularly 
VxWorks. The challenge for Wind 
River was how to accommodate 
these requirements, while sup- 
porting the standard Linux net- 
working APIs. As it turned out, explained 
Gonzalez, Interpeak's technology slotted 
in nicely to Wind River's overall strategy 
of device software optimization. 

From a VxWorks perspective, the 
company claims that the new networking 
stack is 20 percent smaller than the 
default configuration of the previous (3.x) 
version, a boon for developers working in 
resource-constrained environments. 

The new VxWorks 6.5 offers Wind Riv- 
er Advanced Networking Technologies as 
a built-in feature; they are also built into 
the company's Platforms 3.5 series of 
packages for automotive, consumer and 
industrial devices and network equip- 
ment, as well as general-purpose applica- 
tions. Users running older VxWorks 6.x or 



Platforms 3.x setups can also make use of 
the technology, as an add-on component. 
A single add-on bundle, Wind River 
Advanced Networking Technologies for 
Linux, is available for Wind River Linux 
1.5 and earlier releases. I 



ACRONYMS-A-GO-GO 



Wind River Advanced Networking 
Technologies support a raft of proto- 
cols, schemes and standards. Here's a 
sampling: 

• Core networking: IPv6 Phase 2 
certified 

• Mobile: Mobile IP foreign and home 
agents 

• Network management: AgentX, 
CLI, SNMP v1-3 and Web 

• Quality of service: ALTQ framework, 
DiffServ 

• Routing: Egual-cost multipath 
(ECMP) routing, policy-based 
routing and Virtual Routing 
Redundancy Protocol (VRRP) 

• Security: 802.1x, cryptography 
offloading, EAP framework, firewall, 
IKE v1/v2, NAT, SSH, SSL and 
802.11 i/WPA2 

• Wireless networking: 802.11 a/b/g 



PEG 



the leading GUI for 
Embedded Systems 




PEG+ - Full Featured Windowing in C++ 

C/PEG - Smallest Footprint in ANSI C 

Royalty Free 

Fast execution speed 

Completely ROM-able 

Delivered with Full Source Code 

Development Tools including 
FontCapture, PEG WindowBuilder, 
and ImageConvert 

Complete set of screen drivers included 

Completely customizable 

Industry leading RTOS Support 

Supports all popular target processors, 
video controllers and I/O devices 

Multi-lingual support - 2-byte character 
sets & UNICODE string encoding 

Event-driven programming model 

Application Design Services 

Knowledgeable and timely support 
to users around the globe 

Now includes a fully licensed version of 
Paint Shop Pro 9 





GRAPHICS SOFTWARE FOR EMBEDDED SYSTEMS 
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Innovations by InterSystems 




Embed Cache. The gold standard of object databases. 

When you embed InterSystems Cache® in your applications, they become more valuable. Cache 
dramatically improves speed and scalability while decreasing hardware and administration 
requirements. This innovative object database runs SQL queries faster than 
relational databases. And with InterSystems' Unified Data Architecture™ tech- 
nology, Cache eliminates the need for object-relational mapping. Which means 
Cache doesn't just speed up the performance of applications, it also accelerates 
their development. Cache is available for Unix, Linux, Windows, Mac OS X, and OpenVMS - 
and it also supports MultiValue development. Cache is deployed in more than 100,000 
systems ranging from two to over 50,000 users. Embed our innovations, enrich your applications. 



InterSystems 

CACHF 



Download a free, fully functional, no -time -limit copy of Cache, or request it on CD, at InterSystems.com/Cache22JJ 



S) 2007 InterSystems Corporation. All rights reserved. InterSystems Cache is a registered I rSystems Corporation. 6-07 ValCache22SDTi 
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Java's Needs 

Dynamic language, SOA 
support part of its future 
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BY JENNIFER DEJONG 



It soared to heights in the Internet era. But a 
little more than a decade later, the Java 
programming language is working hard to 
stay aloft. 
Created by Sun Microsystems in the early 1990s, 
Java was released in 1995, just as the World Wide 
Web had begun to take off. But today the language 
that led the way is lagging behind. Java is playing 
catch-up with Web development technologies such as 
AJAX and Flash (for building rich Internet applica- 
tions), and with dynamic languages like PHP, Python 
and Ruby, which let developers write Web applica- 
tions quickly. "Java is strong," said Sun director of 
Web technologies Tim Bray. "But .NET is not going 
away. PHP is not going away." 

SD Times asked Bray and other Java experts what 
lies ahead for the programming language and the plat- 
forms on which it is implemented, including Java Stan- 
dard Edition (Java SE), Java Micro Edition (Java ME) 
and Java Enterprise Edition (Java EE). 

Enabling developers to more easily build RIAs and 
use dynamic languages within the Java platforms 
remains a high priority, as does providing a better way to 



!■ 



build services and manage service- 
oriented architectures (SOAs), the experts 
said. They also noted Java's bright future as the language 
of choice for real-time applications (see "Predictably, 
Java Goes Real-Time," page 40), and its suitability for 
writing programs that run on "wider, instead of faster 
computers," said Bray, referring to those that rely on 
multicore processors. Finally, the experts noted that 
Sun's long-awaited release of Java to an open source pro- 
ject under the GPLv2 is pivotal to the future of the lan- 
guage and the platforms. 

"A lot of innovation will come from open source, not 
just the JCP," said IBM director of Java technologies 
Mark Thomas, referring to the Java Community Process 
body that governs Java standards. 

Here's the experts' take on what's next for Java. 

FIRST-CLASS SUPPORT FOR SOA 

Like databases and operating systems, Java applications 
have become part of the core computing infrastructure, 
but when it comes to moving that infrastructure toward 
SOA, Java isn't offering enough help today, said Thomas. 
"You can try to implement components [for SOA] 



through the 
Java ClassLoader, but 
that can be unwieldy and error- 
prone." A more effective way to enable SOA is through 
the OSGi technology, a module system for Java that is 
expected to become part of the Java standard, as speci- 
fied in JSRs 291 and 232, he noted. "The ability to 
dynamically install, start and update services is critical 
[to Java's future]," he said. 

Oracle chief architect and vice president of tools 
and middleware Ted Farrell agreed. "Responding to 
SOA [in Java today] is way too complicated. We have 
to simplify that." In the future, the process of how 
services are built, assembled and hosted in the end 
environment will be abstracted from the developer, 
added Oracle senior principal product director Ralf 
Dossmann. 

BETTER PLUGABILITY 

Also on the horizon is the ability to plug in third-par- 
ty technologies so that they work more easily with 
Java EE and other Java platforms. "A lot of develop- 

continued on page 40 ► 
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Java to Reflect New Technologies 



< continued from page 39 

ers want to use Spring, the Google 
Web Toolkit and Oracle [Application 
Development Framework]," said Doss- 
mann, referring to three Web frame- 
work offerings. "What we will see is the 
formalization of how the Java platform 
will deal with plugability," he said. 

Addressing this issue is part of Sun's 
"Java And" initiative, noted Sun senior 
director for Java product marketing 
Jean Elliot. "The goal is to make it eas- 
ier for Java developers to use whatever 
technologies are appropriate for get- 
ting their jobs done." 

Does that include support for 
dynamic languages within the Java plat- 
form? Tentatively, yes — at least for 
Ruby. Open source project JRuby — 
version 1.0 was released last month — is 
a pure-Java implementation of the 
Ruby programming language that lets 
Java developers use JRuby to write Web 
apps and deploy them on Java EE, said 
Sun's Bray. "Rails is a nice development 
environment, but its deployment 
options are limited," he said, referring 
to the popular Ruby on Rails Web 
application framework. 

Sun showed the first sign of support 
for dynamic languages in September 
2006 when it hired Charles Nutter and 
Thomas Enebo, the lead developers of 
JRuby. 

"I admire Sun for putting money 
behind JRuby," said Bruce Eckel, who 
heads the software development consul- 
tancy MindView "That proves dynamic 
languages are real contenders." 

Will Sun support other dynamic lan- 
guages in the Java platform? "PHP and 
Python are potentially interesting. These 
are things Sun should support," said 
Bray. He did not offer further details, 



RUNNING ON THE JVM 



Ask the author of the book "Thinking in 
Java" what he thinks about the future of 
Java, and he doesn't mince words. "The 
future is the Java Virtual Machine, with 
higher-level languages running on top of 
it," said Bruce Eckel, head of the software 
development consultancy MindView. "The 
Java programming language has become 
increasingly top-heavy, and it is more and 
more difficult to use." 

The root of the problem, in Eckel's 
view, is poor design. For instance, Java 
did not support generics in its initial 
releases, and when the enhancement to 
the type system (which provides com- 
pile-time type safety) was added to the 
language in 2004, it wasn't wired into 
the framework. "Generics was tacked on 
as an afterthought." Other features had 
been added that way, too, he said. That 
approach will eventually "strangle the 
language." 



but said, "Sun is not going to support 
them as broadly as JRuby." 

MOVING TOWARD RIAS 

Sun's May announcement at JavaOne of 
JavaFX Script, a language that will 
automatically run on any Java Virtual 
Machine, is a critical step in making it 
easier for Java developers to write 



applications with rich user interfaces. It 
will allow Java developers to run con- 
tent on a mobile phone, desktop or dig- 
ital TV, regardless of where the content 
is created, said Sun's Elliot. "It also will 
make Swing easier to use," she said, 
referring to the GUI toolkit for Java. "It 
has been difficult to access in the past." 
Sun has not specified when it will deliv- 



er JavaFX and related tools. 

Elliot acknowledged there is still a 
lot of work to do with Java. "We have 
built a lot of power into these plat- 
forms. Now it's time to make it as easy 
as possible to exploit that power. The 
future requires work in a lot of areas — 
in every single way we interact with 
developers." I 



Predictably, Java Goes Real-Time 



BY JENNIFER DEJONG 

They keep planes from crashing, saving 
lives. 

They keep money moving through 
markets at millisecond speeds, saving 
millions. 

Real-time applications are all about 
speed and predictable response times, 
said David Bacon, a manager of pro- 
gramming languages for IBM Research. 
Traditionally such applications have been 
written in Assembly or C. But recent 
enhancements to the Java programming 
language are making it powerful enough 
to take on the real-time challenge. 

Real-time applications must execute 
and control processes as they actually 
occur, ensuring not only that the system 
will execute a function correctly, but that 
it will do so within the required time 
frame, said Bacon. "A critical time lapse 
between reading [the airplane's] sensors 
and taking action can make the differ- 
ence between life and death. And a mil- 
lisecond advantage in financial trade can 
equal millions of dollars in profits." 

TAKE OUT THE GARBAGE 

Real-time applications written in Java 
are far easier to design, develop and 
debug than those written in Assembly or 



Eckel predicts that programmers will 
move on to languages that run on top of 
the JVM. A current favorite of his is 
Scala. Developed by the open source 
community (www.scala-lang.org), Scala 
runs on both the JVM and the .NET 
Framework. 

Among the things Eckel likes about 
the language is the way it implements 
concurrency, the simultaneous execu- 
tion of multiple, interacting tasks. 
Scala's solution to that problem is easier 
to use than threading, he said, referring 
to Java's concurrent programming 
approach. "Threading isn't the right 
solution. It's too hard to implement, and 
getting threading to work properly in 
Java reguires more skill and understand- 
ing than many developers have." To 
make matters worse, it's easy for Java 
developers to assume they understand 
threading, when they don't, he added. 



'A critical time lapse between reading 

[the airplane's] sensors and taking 

action can make the difference between 

life and death. And a millisecond 

advantage in financial trade can egual 

millions of dollars in profits. ' 

David Bacon, a manager of 
programming languages for IBM Research 




C, said Bacon. And Java's type safety and 
security features also make it a good 
match for real time. 

But there was a key problem to over- 
come: How does one contend with the 
delay that occurs when a Java applica- 
tion carries out garbage collection? Dur- 
ing the garbage collection process, Java 
is essentially going through the memory 
space and figuring out which pieces of 
memory are no longer used, and can 
therefore be reallocated elsewhere. The 
problem is that all application functions 
cease while memory is cleaned up, mak- 
ing Java ill-suited for real time. 

Both IBM and Sun Microsystems 
have devised solutions. The team behind 
the IBM Research project called Metro- 



Asked to respond to Eckel's com- 
ment that Java is too difficult to use, 
Sun Microsystems senior director for 
Java product marketing Jean Elliott 
said Sun is working to ensure there are 
great tools, and that developers are 
trained to use them. "We need to make 
it so people can make the most out of 
what is there." 

Eckel believes Java will be used for 
smaller portions of projects in the 
future. But he doesn't underestimate the 
considerable contributions the language 
has made to programming. In addition to 
the JVM, Java has moved the concept of 
garbage collection— the automatic 
memory management scheme— into the 
mainstream, he said. But at this point in 
Java's history, "programmers are serv- 
ing the language. The language is not 
serving them." 

—Jennifer deJong 



nome (domino.research.ibm.com/comm 
/research_projects.nsf/pages/metronome 
.index.html) has figured out how to 
enable garbage collection without bring- 
ing the application to a halt. Instead, it 
interrupts constantly, throughout the 
program for brief, regular amounts of 
time, which is key for real-time applica- 
tions. Each interruption is 500 microsec- 
onds — that is, half a millisecond, he said. 
"We have reduced the delay by a factor 
of 1,000." 

The Metronome technology is being 
used today by companies in the defense 
sector to help build the next generation 
of the Destroyer battleship, and is also 
integrated in IBM's WebSphere offer- 
ings for the telecommunications indus- 
try, said Bacon. 

Sun's real-time offering (java.sun 
.com/javase/technologies/realtime/index 
.jsp) is based on Java Standard Edition 5, 
said Dave Hofert, a group marketing 
manager for the company. Sun's approach 
is slightly different from IBM's. Instead of 
interrupting the program continually, it 
modified Java so it can pay attention to 
priorities. 

"The real-time garbage collector can 
be interrupted to execute a stock trade," 
Hofert said, offering an example. "You 
don't want to be collecting garbage when 
an event like that occurs — or you may lose 
money." Sun's real-time Java offering is 
being used by the Nasdaq stock market, 
he noted. But applications for real time 
are likely to arise in businesses where they 
haven't been seen before, he said. Media 
is one example. "A video is a real-time sys- 
tem. When you are displaying 30 frames a 
second, you don't want to be interrupted," 
he said. "The need for real-time response 
is going more mainstream, and we have 
enabled Java to become predictable." I 
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FROM THE EDITORS 

Focus on Security 

First came the announcement last month that IBM would acquire 
Watchfire, which sells security assessment software. Then HP fol- 
lowed by announcing it would buy SPI Dynamics, another well-regard- 
ed software security company 

Industry pundits had been writing for some time that there would be 
consolidation in this market, which features companies such as Cenzic, 
Klocwork and Ounce Labs. Any or all of these concerns could be ripe for 
the picking by Microsoft or Oracle, which as of now do not offer a secure 
software solution to compete against IBM and HP. 

These acquisitions are a signal that software tool providers acknowl- 
edge that firewalls, access control lists and other measures are not 
enough to stop the siege from hackers looking to exploit personal data or 
to simply lock up a system for the fun of it. These major companies are 
learning that security is something that needs to be addressed during the 
creation of code, not a feature to be slapped on at the end. 

Preventing access only stops people from getting to your data in ways 
you expect; writing secure code can cover the entry points you don't 
immediately think of, or even see. 

IBM already had tight integration with Watchfire in its Rational devel- 
opment life-cycle tools, while HP will incorporate the SPI Dynamics 
functionality into its former Mercury testing and QA tools. That's an 
excellent first step toward securing software, in addition to securing net- 
works and servers. 

The harder challenge remains: convincing the people who gather 
requirements, create models and write code that security is their respon- 
sibility as well. Analysts have cited an unchanging culture among devel- 
opers as a roadblock to security. And vendors have said you can give 
developers all the tools in the world, but you can't make them use them. 

Well, their bosses can. Now that IBM and HP are providing enter- 
prise-class tools for security assessment, it falls to the development man- 
agers and project managers to make sure security is considered at each 
step — requirements, modeling, code, build, test and QA. They have a 
harder job than the vendors, but software will always be vulnerable until 
they get buy-in all along the life cycle. 

Purity Isn't Always Practical 

Ideological purity is a wonderful thing, when one is on the side of the 
angels. Unfortunately, most of us exist in a more workaday world and 
have learned that ideology doesn't necessarily make for sound business 
decisions. 

Not everyone agrees with that, of course, as vocal members of the 
open source community view the world in black-and-white terms. Con- 
sider the fuss being raised by some members of the open source com- 
munity over Microsoft's ongoing series of deals with Linux distributors. 
When Novell came to terms with Microsoft last fall, we noted that it 
looked like the 1939 Molotov-Ribbentrop pact all over again. At the risk 
of overextending the analogy, Microsoft's deals with Linspire and Xan- 
dros look more like pacts with Horthy-era Hungary and Mannerheim's 
Finland. In other words, the users affected are an infinitesimal slice of 
the pie. 

It is clear that Microsoft's leaders feel threatened by open source tech- 
nologies. But even the company's most ideologically committed execu- 
tives and managers recognize that the cat is out of the bag, and Microsoft 
is now willing to work with the open source community, whose money is 
just as green as anyone else's. Microsoft is cutting deals with companies 
because it's used to dealing with businesses, not amorphous communities. 

But, as cynical and jaded as we are, we don't see a downside from 
these arrangements affecting end users, or the open source community 
as a whole. Like it or not, Windows interoperability is a must, and deal- 
ing with Microsoft is a must, if Linux is going to continue to grow as a 
broad business technology. I 



Threading the SaaS Needle 



By Invitation 



The software as a service (SaaS) market 
is heating up. Various pundits predict 
that it will be 25 percent to 30 percent of 
the new software market by 2010. Almost 
all venture capital investments in soft- 
ware companies today are going into 
companies with SaaS business models. It 
looks like an easy decision: Move in the 
direction of the market. But wait! You 
need a road map and a safari 
guide before you start. 

To be a successful SaaS 
business, an organization has 
to consider a number of potential barri- 
ers — some obvious, some invisible. 

What's your product? Will you be 
moving an existing (and presumably suc- 
cessful) packaged software product to the 
SaaS platform, or are you creating an 
entirely new product? In either case, you 
need to do enough market analysis to be 
certain that there is a market for your 
intended product in SaaS form. That's a lot 
easier in 2007 than it was in the past, 
because so many potential customers have 
moved or are moving to using SaaS as part 
of their IT resource. They are more likely 
to understand what it is and the generic 
benefits of quick implementation and low- 
er costs; its up to you to find out if they 
need your product, and whether there will 
be competition in your market niche. 

Who's your target customer? While 
its true that products sold on the Web in 
SaaS may attract customers of any size 
and from any geography, you probably 
have a particular kind of customer in 
mind. Your offering is targeted to that cus- 
tomer by its product features, the support 
you provide, and the way you market it. 
Success is most likely when your product 
matches the target market — marketing 
big, complex, expensive products to small 
companies isn't likely to succeed, and 
marketing small products with no support 
isn't likely to attract too many enterprise 
customers — unless you've discovered a 
way to triple their cash flow or convert 
100 percent of their leads to customers. 

How will you reach your cus- 
tomer? An amazing number of software 
entrepreneurs, especially SaaS vendors, 
apparently didn't go to Marketing 101. 
Proud techies, they believe that a good 
product sells itself and that there's some- 
thing slimy about even discussing market- 
ing. Successful business people know bet- 
ter. Even if you have a great and unique 
product, customers still have to find you. 
You might be lucky (like YouTube) and 
get lots of word of mouth, but you can't 
count on it. Sure, you can encourage buzz, 
but no one can guarantee it. 

Who's the competition? It's unlikely 
that you're the only one with this idea. 
Being first and best count, but having a 
brand name, a reputation and good inte- 
gration with an existing set of applications 
and platforms counts, too. This means you 
need to know what the competition looks 
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like, how it's the same as or different from 
you, and what you'll need to compete. If 
you truly are the first, congratulations! But 
remember, it will be your job to educate 
the market as to why they'll want some- 
thing entirely new that can be breathtak- 
ingly fast (for example, YouTube) or 
painfully slow (thousands of good apps 
that don't have the brand name recogni- 
tion or the marketing dollars 
to establish a new market). 
Very few B-to-B products can 
fit the viral marketing model 
required for that breathtaking ride. 

What's your revenue/business 
model? SaaS has a reputation of bring- 
ing nice products to market with little 
understanding of how these products 
will reach profitability. It's a good idea to 
have a business model and conservative 
plans for how long it will take revenue to 
build. Otherwise, unless you have gener- 
ous venture capital funding (possible, 
but likely for only a small percentage of 
companies), you'll run out of money 
long before you turn profitable. There 
are some things to keep in mind: 

• What does it cost you to provide the 
SaaS offering? First things first. In 
order to have a sensible business mod- 
el, you must know what it costs to pro- 
vide the offering. Don't forget to count 
everything — hosting, maintenance, 
support, marketing and upgrades to the 
product. One of the reasons the first try 
at SaaS failed (the application service 
provider market) was that many ASPs 
priced to the competition without any 
idea of what their costs were. Let us 
simply say that some issues like market- 
ing and ongoing maintenance didn't 
make it into the calculations. 

• What will your target market think 
your offering is worth? There is lots 
of free software on the Internet these 
days. That means your software will 
have to show a clear value to the user to 
seem worth a monthly or an annual fee. 
Consumer and business software works 
differently. Most consumer software in 
the SaaS model is free, supported by 
advertising. (Note I said most. Some 
things are seductive enough to attract 
fees even from consumers.) Business 
software may offer a free, limited func- 
tion, limited (or no) support model 
used by individuals and very small com- 
panies — or for evaluation — and then 
paid offerings that offer additional 
function and tiered support. 

• How will you get paid? You can get 
paid by advertisers who want to reach 
your users (but that means your users 
have to reach volumes and have appeal- 
ing demographics), or you can provide 
intellectual property (the software) and 
services (support, customization, train- 
ing) that customers will pay recurring 
or scheduled fees to access. B-to-B 
software is often priced by the month 



www.sdtimes.com 



. Software Development Times . July 15, 2007 . 



OPINION 



43 



but sold by the year (or by multiyear 
contracts), allowing the company to get 
a better handle on cash flow; this gen- 
erally requires some discounting, 

• What does the competition charge? 
It's a lot easier to compete if you are 
charging an equivalent (or slightly low- 
er) price than your competitors. If you 
must charge a substantially higher 
price, you'll have to show a much more 
valuable proposition. And if you charge 
a substantially lower price, many cus- 
tomers may simply assume your offer- 
ing isn't worth much. 

How will you grow? In order to 
succeed, you'll want to show double-dig- 
it growth. That's what gets the attention 
of the marketplace and of the potential 
partners you'll want to attract to your 
ecosystem. Of course, it's a vicious cycle 
you need to turn into a virtuous one. 

• Tiny companies find it hard to be 
heard. When you're a small startup, 
it's hard to get heard and that makes it 
hard to gain traction and attract mar- 
ketplace attention. You need an atten- 
tion-getting event. That might be 
hitching your star to a larger player 
who will help you get attention 
because attention on you and your 
relationship is good for him (that's what 
SalesForce.com can do for its part- 
ners). Or it might be finding a great PR 
person and convincing important influ- 
ences (press, bloggers, et al.) that your 
product is really special. 

• Make your partners successful. It's 
hard to do this alone. It's likely that 
you'll need partners to help you add 
function to your product (especially in 
vertical markets), to provide customiza- 
tion and to do selling. Yes, it means 
spending time and sharing profits. But 
it's really hard (perhaps impossible) to 
succeed without that help. Even very 
large companies like IBM and 
Microsoft are constantly recruiting and 
finding new ways to work with partners. 

• Add to your portfolio. If you have 
one product in your portfolio, a con- 
tact with a potential customer may or 
may not end in a new relationship. 
Add more products (hopefully related 
and well integrated), and you increase 
your chances of signing up potential 
customers. You can also cross-sell to 
all of your existing customers and, 
thanks to the Web, that cross-selling 
can be almost free. 

The ramp is rising in the SaaS market. 
Many new players are entering and many 
existing software companies are moving 
to make their products into SaaS offer- 
ings. It is hard work, but with more than 
a quarter of the market for new software 
expected to be in the SaaS sector by 
2010, it's worth thinking hard about. I 

Amy D. Wohl is president ofWohl Associ- 
ates, a consulting firm located in Nar- 
herth, Venn., which consults on new and 
emerging technology and new market 
formation. Read her blog at http://amys 
. typepad. com/amy_wohls_opinions_on_saa/. 
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I'M NOT GIVING ANYTHING away 
by admitting that I, dear readers, am 
the famous Linker from our newslet- 
ters. Last month, I came across a Web 
site that detailed the various types of 
development that exist in modern 
enterprises. One of them is perhaps the 
most common and most damaging type 
of development: the Decapitated 
Chicken Process. Simply put, this prac- 
tice involved management running 
from cubicle to cubicle mandating that 
everyone drop whatever they're doing 
to work on today's crisis. Tomorrow, 
same practice, different crisis. It's the 
type of development environment that 
will never escape the looming deadlines 
and jumbled code that can only come 
from snap judgments and bailing-wire 
solutions. 

-Alex Handy 

THE QUESTION lam hearing most 
about the iPhone is: "Will Apple license 
Microsoft's Active Sync protocol to 'push' 
mail from Exchange servers to the 
iPhone?" Some reports say that it may 
be a done deal; even Fake Steve Jobs 
said it was true. Active Sync or not, the 
iPhone will be able to work with 
Exchange Server using IMAP There 
was even speculation that a recent 
update for Exchange Server may have 
targeted the iPhone by fixing a problem 
between Mac Mail and IMAP. Is 
Microsoft really on the iPhone bandwag- 
on, or is it just more hype? 

-David Worthington 

LIKE MANY OF YOU, I suspect, I 
enjoy a good barbecue. Throw a steak or 
some burgers on the grill, crack open a 




cold one, and I'm a happy guy. Donald 
Williamson of .NET component vendor 
FarPoint Technologies takes his barbe- 
cue quite a bit more seriously. He's com- 
peted in numerous cook-offs, taking sec- 
ond in a whole-hog 
cook-off one time, and 
markets his own dry rub 
and sauce under the 
"Williamson House" 
label. Based in North 
Carolina, he has signed 
a deal with East Coast grocery chain 
Harris Teeter to sell his barbecue "kits" 
and has even made a video showing 
the perfect way to prepare ribs (www 
.williamsonhousesauce.com/ribkit.aspx). 
WARNING: Eat before you watch this. 
-David Rubinstein 

MERITOCRACIES have their limita- 
tions. The committers to most open 
source projects are the most hard-work- 
ing, best informed and most dedicated 
individuals. Anyone who's not a commit- 
ter is, by definition, not as hard-working, 
not as well informed and certainly not as 
dedicated. In other words, we have a 
small core of first-class citizens, sur- 
rounded by a great mass of second-class 
citizens. Ubuntu Linux founder Mark 
Shuttleworth, speaking in mid-June at 
the Linux Foundation Collaboration 
Summit, asked project leaders to make 
sure that people who aren't official com- 
mitters, who aren't developers, and who 
don't live in the source-code repository, 
can contribute ideas and bugs without 
being ignored or insulted by the inner cir- 
cle. It's time for more civility and open- 
mindedness in the open source world. 

-Alan Zeichick 
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The worldwide market for relational database management systems (RDBMS) grew by 
14 percent in 2006, according to figures recently released by Gartner. Oracle had more than 
twice the revenue of second-place IBM and barely stayed ahead of the overall industry 
revenue growth, at just under 15 percent. Microsoft appeared to be last year's big winner, 
with growth almost double that of the market as a whole. 

IBM, Sybase and Teradata all managed to grow while losing ground in 2006. IBM gave up 
a point of market share, and Sybase moved up from fifth place into a near tie with Teradata, 
each with 3.2 percent of the 2006 revenue. The rest of the market— representing more 
than a billion dollars in revenue— grew about 5 percent last year, according to Gartner. 
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In the March 15, 2006, issue of SD 
Times, I discussed innovations and 
research topics that JVM vendors were 
considering for upcoming releases of the 
Java runtime (see "JVMs Keep a-Rollin' 
for Top Performance," www.sdtimes 
.com/article/special-20060315-Ol.html). 
Among the many interesting possibili- 
ties, one that truly captured my imagina- 
tion was a technology from BE A that 
came to be known as Bare Metal Java. 
The name is a bit of an exaggeration, but 
it communicates a central aspect: run- 
ning Java without extra layers of soft- 
ware. The layer that Bare Metal 
removes is, curiously, the operating sys- 
tem. First, however, let me step back a 
bit and give you the context, so you can 
see more clearly what BEA is doing. 

Many IT sites are increasingly using 
virtualization to run applications due to 
its many benefits, which I have discussed 
in previous columns. However, running 
Java applications in a virtualized environ- 
ment means running a rather substantial 
stack of software: a host operating sys- 
tem, virtualization hypervisor, VM oper- 
ating system, JVM, and at last, your 
application. BEA realized long ago that 
the JVM s need for the OS is actually lim- 
ited to a few activities and that much of 
the operating systems functions can be 



Integration Watch 



Bare Metal Java 

performed quite satisfactorily by the VM 
and the JVM in tandem. It reasoned that 
it made sense to try to remove the OS 
and run the JVM on the VM proper. This 
design would have an important benefit 
that might not be obvious: The JVM 
could then schedule when threads run. 
This detail actually looms 
large in performance. On reg- 
ular JVM deployments, the 
JVM can only request that the 
OS run a thread, it cannot 
compel it to do so. (This limi- 
tation applies to all applica- 
tions running on standard 
operating systems, of course.) 
This nondeterminism has 
obvious performance limita- 
tions, but more important, it 
prevents the JVM from knowing the 
exact state of the application. This knowl- 
edge is crucial to JVM performance, as 
the one aspect that has enabled Java per- 
formance to approach native code is the 
extra knowledge the JVM possesses 
about the runtime profile. This data per- 
mits the JVM to make effective on-the- 
fly optimizations. 

So, BEA began researching what 
functions would be needed in an OS 
replacement layer that lives with the 
VMware VM below it and BEAs JRockit 




JVM above it. Eventually, it wrote some 
60K lines of code for an "OS shim" that 
responds to memory allocations, JVM 
thread requests and a few housekeeping 
chores. This shim has an API layer (based 
on POSIX), so that it can be ported in the 
future to other platforms. (It does not 
support a filesystem, curiously. 
Files are expected to all be 
accessed remotely on net- 
worked storage. More on the 
internals of the shim can be 
found at developers.sun.com 
/learning/javaoneonline/2006 
/coolstuff/TS-3792.pdf, which 
makes for great reading.) 

The combined VM/OS 
shim/JRockit JVM is being 
shipped as a single unit, or as 
BEA calls it, a software appliance — the 
BEA LiquidVM. When you add BEAs 
application server, the bundle is called 
WebLogic Server, Virtual Edition 
(WLVE). The benefit of WLVE is that 
you can configure the app server for the 
Liquid VM software appliance and then 
move it around your infrastructure as 
you need it. 

For example, if your grid needs 
another node, you fire up one or two of 
these appliances. The management con- 
sole in WebLogic Server will detect 



these available instances of the app 
server and will automatically fold them 
into the cluster and put them to work 
processing requests and transactions. 
Likewise, after a processing peak has 
passed, various appliances can be 
unloaded from the cluster and made 
available to other applications. And 
again, because of the appliance nature 
of the software stack, admins will know 
exactly what the server appliance capac- 
ity is and how many instances an appli- 
cation needs. This aspect provides the 
sort of horsepower-on-demand (without 
a grid) that virtualization has been 
promising for a while. 

It's certainly true that the appliance 
concept could be implemented without 
the OS shim and using a full operating 
system in its place. However, the shim 
does away with several problems: First of 
these, of course, is the performance bot- 
tleneck; second is the enormous amount 
of VM memory the OS occupies. In addi- 
tion, the shim is a black box, so admins 
don't have to remember differences (if, 
say, Windows were used instead) in how 
the appliance works with Windows XP, 
Server or Vista. Nor is there any OS con- 
figuration to do. The shim is optimized 
for the specific VM and JVM combo. Just 
load and go. Elegant, no? I 

Andrew Binstock is the principal analyst 
at Pacific Data Works. Read his blog at 
binstock. blogspot. com. 




aaJes^sGCijacilt.ccm 



AccuSoi i 



Instantly Search Terabytes 




, 



. 



caw-** 1 *"" 



Contact dtStsrch for 

hjjly -functional evaluations 

The Smart choice for 
T*Kt BttHflV*! - &Eftc* 1991 



fielded data and full-text learcJi options 

» Highland- Is n HIM L, XML and POh, 
wnile dtol jyHr>g Unlet Twnaning^d 



+ converts other file types [database, 
word prnsFPSon ^n&pcHhi?<?t - email 
and atlEKhnoTWp ZIP. Unicode etc.] to 
kTMI fordltftiy with Hghlightttl Mu 

+ SfpidflF s-uppc^m nunc and dy*ixnit 

Wit bi LiJtcLiPrlL, willi WY3WYG 

hk-iiiqhIitfTtinq 

* APIsiiDpcircs.HET^fiETJ.OrC+4-rJavac 
SQL databases. Hew. NETJ-NET 2.U 
Spider A« 

dtSearch* Review* 

* "Gc*H.o*n I lift: dtSedrth manage* d 

tercet* at text in 4 atngle inde* and 
-JWbHtortt 

* "For i;ymbingj Uirp^icfh la-nju airiflun-U 

ol data,, ot Smirch 'leads trie market" 
- .Wtwtirk Campy ting 

* "EHiidih^tv I uif- Curri^crCiir Farmd* l 
Inadent. fler panw Essentials 

■+ "T^we^ aU dati source* ... pom»rf ul 
Wrb-bflwd cnflmM* - rl^fFtf 

* "Searches at blaring speeds" 

™ Coiirptftwr Reiulter flfriinr Tini OviJr* 

+ The most powerful d-DEumerrt search 
lool an the ma rkei rt ~ Witutf Magazine 

For hundreds mow reviews — And 
deuvluper Lai* aLudies.— s*e 
www.dt5earch.tmri 



1 -800-1 T FIND 5 • www.dtsearch.com 



www.sdtimes.com 



Software Development Times . July 15, 2007 . 



COLUMNS 



45 



Reuse Not at the Core of SOA 



When speaking at the last Gartner 
show on SOA and ROI, I noticed 
that all of the speakers and analysts have 
finally come to the same conclusion: 
Reuse is not a core value of a service- 
oriented architecture. 

When considering the way SOA is 
sold within the enterprise, the notion 
of service reuse typically leads the 
charge. It just seems logical: A service- 
oriented approach means that we 
divide up applications into services, 
and then create a layer on top of those 
services to mix and match the services, 
turning them into business solutions. 
So, it would seem that the core value of 
a SOA has got to be the ability to reuse 
those services, correct? 

Not a chance. 

Indeed, as we spend more time siz- 
ing up the value of a SOA, many find 
that the promise of reuse is coming up 
short when compared with other value 
propositions, such as agility. This is not 
to say that you won't find reuse valu- 
able in the world of SOA, just not as 
much as you perhaps thought you 
would. 

So, how does one figure out the val- 
ue of reuse, or ROI, when considering 
SOA? There are some key metrics you 
need to define, including the number 
of services that will be truly reusable, 
the degree of reuse, and the value of 
each service. 

The number of services that are 



reusable is a true accounting of the 
inventory of services within a particular 
enterprise, and offers a true under- 
standing about the number of services 
that will actually be reused from appli- 
cation to application, from domain to 
domain, and from enterprise to enter 
prise. Thus, this exercise is 
all about asking if a service is 
reusable, and not asking how 
much, or how valuable. 

Truth be told, within 
many enterprises the num- 
ber of services that are actu- 
ally reusable from consumer 
to consumer are few and far 
between when getting right 
down to the essence of the 
services. 

One of the exercises I go through 
with my clients is to take a quick inven- 
tory of services, or service patterns, 
and then go one by one through each 
service, asking them about the need for 
this service as related to other applica- 
tions, composites or orchestrations. By 
the end of that analysis, it's usually 
clear that there are some services that 
are "reusable" but clearly not as many 
as they expected. 

The degree of reuse refers to the 
percentage of reuse from the services 
previously identified. Thus, if we have 
100 services that are reusable or avail- 
able for reuse, what percentage of 
reuse will those services see? Again, it's 




a matter of considering the inventory 
and going through each service to 
determine the degree or percentage of 
reuse. 

This is an eye-opening experience 
for most, and it's during this process 
that services are analyzed for their own 
value and a percentage is 
assigned to them as to the 
number of times that ser- 
vices will see reuse, now and 
into the future. 

A few things are typically 
apparent during this step. 

First, many of the ser- 
vices under analysis are 
tossed out because their 
degree of reuse is too low. In 
most cases it's 50 percent. 
Second, the percentages of reuse 
found are relatively lower than first 
thought. Finally, the services that do 
see a higher percentage of reuse are 
typically simple services, and may not 
have a ton of value. 

Once you've figured out the num- 
ber of services that are available for 
reuse, and the degree of reuse, it's time 
to assign a value to those reusable ser- 
vices. 

Thus, as you might expect, you list 
those services and assign value points 
(typically 1-10), and then assign dollar 
figures to those points (typically 
US$10,000 per year). From there you 
can get a rough idea as to the value of 



reuse that your SOA will bring you. 

While most were hoping for num- 
bers well beyond seven figures, the 
actual value of reuse is usually much 
less than expected. Why is this? There 
are a few factors at play. 

First, most of the services that are 
exposed for use within a SOA are exist- 
ing, and therefore were not designed 
for reuse. Simply re-exposing them as 
Web services does not change the 
underlying design patterns, and their 
ability to become a reusable asset does 
not increase by much. I suspect that as 
more services are designed and built 
from scratch, the reuse value will go up 
significantly. 

Second, the services are typically 
too course-grained to be valuable for 
reuse. Those who built these services 
did not do so with reuse in mind, nor 
did the developers that service- 
enabled the system. 

Finally, the core business systems 
do very different things, and thus don't 
need to share services. 

So, the value of reuse is much less 
than expected, or than the "SOA hype" 
has been stating. The true value of 
SOA is the ability to create enterprise 
architectures that provide much better 
agility than the overly complex, static 
and fragile architectures we have 
around today. 

However, agility is a topic of anoth- 
er column. I 

David S. Linthicum is the CEO of the 
Linthicum Group. Reach him at david 
@linthicumgroup. com. 



What Bears Repeating 



Software development is hard. Soft- 
ware development can be made 
easier by disciplined team and manage- 
rial practices. The best programmers 
are near an order of magnitude better 
than the worst and two or more times 
as productive as the average, but 
exceptional programmers are hard to 
hire. Users are not good at technical 
design. Tools can contribute very sig- 
nificantly to productivity of particular 
tasks, but the schedules of nontrivial 
applications are controlled by so many 
tasks that no single tool will prove rad- 
ically transformative. 

These are not faddish statements or 
new conclusions. Each of these has 
been known for decades. The majority 
of worthy talk about "how to develop 
software" is aimed at mitigating these 
truths, putting them in current con- 
texts, or discussing less-used or emerg- 
ing approaches that might address 
emerging problems. There's also not 
harmful speculation that these rules 
might not hold forever or might not 
apply in particular niches. 

Sadly, there's also always a lot of talk 



that claims that "this time, things are 
different." Usually, that talk is predi- 
cated on "my company's great new 
technology" or "this technology I used 
in a cool 500-line application." 

You almost certainly know all this, 
but it bears repeating. New people 
come into our profession at 
all levels — young people with 
computer science or voca- 
tional backgrounds, older 
managers coming in horizon- 
tally, and executives waking 
up to realize their company 
is in the business of software 
development. Most teams 
have at least one person 
invested in some harmful 
belief about software devel- 
opment: that requirements 
"nailed down," that scheduling consists 
of creating an 18-month Gantt chart, 
that pulling an all-nighter is a normal 
part of the programmer's job, etc. 

It can be hard for more experienced 
developers and managers to engage 
such people without becoming dismis- 
sive, without "throwing the bozo bit" as 
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software industry veteran and author 
Jim McCarthy phrased it. But it's these 
very people who are often most inter- 
ested and open to what we do know 
about best practices. 

For instance, we know that itera- 
tive development, focusing on the 
quality of a relatively 
small amount of new func- 
tionality, is the best way to 
structure the development 
of large applications. We 
know that communication 
and coordination overhead 
makes larger teams less 
effective per-person than 
smaller teams. We know 
that structuring code in 
ways that maximize cohe- 
sion and minimize coupling results in 
more maintainable code. We know 
that compromising quality assurance 
in order to meet a deadline is one of 
the most counterproductive choices a 
team can make. 

Then there are things that are wide- 
ly believed but are so hard to study that 
it's difficult to call them proven: that 
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object orientation is a good way to talk 
about large applications, that unit- test- 
ing contributes significantly to produc- 
tivity, that managed platforms perform 
and scale well enough, and that sus- 
taining concentration is more produc- 
tive than multitasking (or has that been 
proven?). 

Finally, there are the things that 
experienced developers and managers 
argue about amongst themselves. Is 
"convention over configuration" a good 
approach to framework design? How 
do you hire and retain exceptional 
developers? How do you prioritize 
development iterations in a service- 
oriented architecture? What tools are 
most productive for developing rich 
Internet applications? Now that we 
face a future of many-core chips, is 
functional programming going to gain 
in popularity? 

We should ask and debate those 
questions, but we should occasionally 
enumerate the bedrock principles that 
might not be engrained in the minds of 
newer developers and managers. 

What bears repeating? I 

Larry O'Brien is a technology consul- 
tant, analyst and writer. Read his blog 
at www.knowing.net. 
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What's an Enterprise Architect? 



Industry Watch 



Architecture is not where developers 
go to die. 

In IT, it's a role that's orthogonal to the 
others. It's not necessary for an enterprise 
architect to have been a developer, or a 
tester or a salesman. But, like a building 
architect who might have benefited from 
doing some construction, there are some 
skills that an enterprise architect could 
benefit from. Two hundred 
and fifty-six, to be precise. 

That skill set is what Paul 
Preiss, founder of the Interna- 
tional Association of Software 
Architects (IASA), has com- 
piled into a taxonomy designed 
to help the industry define ex- 
actly what an enterprise archi- 
tect does, and what he knows. 

In fact, Preiss has even 
come up with a manifesto for 
architecture: To build and buy 
software as possible to beat our competi- 
tion and make us money. 

But he also makes the claim that 
architecture isn't a definition that can be 
written down; it's knowledge in the 
heads of those workers filling the archi- 
tecture roles. There are vast islands of 
information — Zachmann Framework, 
The Open Group Application Frame- 
work (TOGAF), IEEE1471, to name 
but a few — that enterprise architects 
need to connect and understand. 

Enterprise architecture, Preiss noted, 
"needs an advocacy effort that is funded 
and clear. The value proposition has nev- 
er been written out clearly." In his mind, 
that value is clear. Architects can either 
make or save companies money. "Almost 
every profession is represented by an 
association except for IT," Preiss said. 

As defined by Preiss and IASA, there 
are five foundation categories of skills 




required for an enterprise architect — the 
IT environment, design skills, human 
dynamics, quality attributes and business- 
technology strategy. Above those founda- 
tional skills are three specializations — 
software architecture, infrastructure 
architecture and business architecture. 
The group is currently evaluating whether 
to add information architecture as a 
fourth specialization, Preiss 
said. Within those are the 256 
skills covering 110 topics that 
IASA says an enterprise archi- 
tect would need to command. 
Already, efforts are under 
way to certify enterprise 
architects. The Open Group 
in February launched the 
Association of Open Group 
Enterprise Architects to certi- 
fy architects that meet stan- 
dards it has developed for TOGAF. 
Apparently, though, there is no agree- 
ment between IASA and AOGEA; as 
Preiss said, "There is no rigorous body of 
knowledge, so how do you certify some- 
thing [when] you don't know what it is? 
For instance, very few finance people 
argue about the value of a dollar. All 
banks have the same definition." The 
same, he posited, can't be said of enter- 
prise architecture. 

Preiss claimed that IASA is putting 
together that rigorous body of knowl- 
edge, and that his group will be involved 
in architect certification. A training pro- 
gram also is planned that will require 
1,200 hours of seat time in a number of 
different courses. 

IASA envisions an associate certifica- 
tion for someone who had taken some 
introductory training from the organiza- 
tion and who has some peer and mentor 
interactions; a professional certification 



would exist for someone taking advanced 
training and performing an internship; 
and a master certification would be cre- 
ated for someone who has gained profes- 
sional recognition through independent 
work. 

The question is whether The Open 
Group and IASA can agree on the defi- 
nitions necessary for professional certifi- 
cation, or if there will be different cer- 
tificates for architects passing each 
group's set of standards. 

Frankly, it doesn't matter. A mechan- 
ic certified to work on Hondas has a dif- 
ferent skill set than a mechanic certified 
to work on Greyhound buses, but both 
are certified, and depending upon which 
kind of vehicle I'm driving, I'll go to the 
mechanic who best fits my needs. The 
same will hold true for companies look- 
ing to hire architects to work within the 
framework the company has chosen. I 
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BUSINESS BRIEFS 




Following a trend that spans numerous industries, Embarcadero 
Technologies announced a US$200 million deal with Thoma 
Cressey Bravo that takes the company private. Raj Sahblok, who 
has been with the company since 2000, has been promoted to 
president and CEO. Embarcadero, founded in 1993, sells database 
management tools. The company plans to announce two new prod- 
ucts, built on Eclipse and XML, later this year, and will update its 
core products as well. Embarcadero believes the move to go pri- 
vate will result in greater resources and flexibility to develop its 
tools and respond to customer needs . . . Open source software 
provider Red Hat has acguired the Mobicents technology to 
expand its position into the telecommunications industry. Mobi- 
cents is an event-driven application server that has a Service Log- 
ic Execution Environment, complementing Java EE with voice, 
video and data for next-generation intelligent applications, accord- 
ing to the Red Hat announcement. "Traditional telcos must prepare 
for a new competitive environment that demands greater innova- 
tion, faster time to market, responsible investment and new ways 
of thinking," said Joanne Rohde, executive vice president of verti- 
cals marketing at Red Hat. "Open source is becoming more strate- 



gic in telecom, not only as a means to reduce costs but as a mod- 
el to inspire collaboration, inclusion and reuse — and to drive inno- 
vation." Red Hat also is joining the SCOPE Alliance to help define 
and prioritize reguirements for carrier-grade operating systems. 
SCOPE was formed in January 2006 by Alcatel, Ericsson, Motoro- 
la, Nokia and others. 

EARNINGS: Red Hat posted a 42 percent increase in revenue 
from the prior year in results announced for the first quarter of fis- 
cal 2008. Total revenue for the period was US$118.9 million, while 
subscription revenue was $103 million, up 44 percent from a year 
ago. Net income for the quarter was $16.2 million, or 8 cents per 
share, compared with $13.8 million from the same quarter a year 
ago. Highlights of the company's quarter included the launch of 
version 5 of the Red Hat Enterprise Linux operating system and 
the debut of the company's service-oriented architecture strategy. 
"We are pleased with our solid earnings performance as we exe- 
cuted on initiatives to continually garner market share and mind- 
share in a rapidly growing market," Charlie Peters, CFO of Red Hat, 
said in a statement. I 



EVENTS CALENDAR 



Open Source Convention 


July 23-27 


Portland, Ore. 




O'REILLY MEDIA 




conferences.oreillynet.com/os2007 




SCO Tec Forum 


Aug. 5-7 


Las Vegas 




SCO GROUP 




www.sco.com/2007tecforum 




SIGGRAPH 


Aug. 5-9 


San Diego 




ASSOCIATION FOR COMPUTING MACHINERY 


www.siggraph.org/s2007 




LinuxWorld 


Aug. 6-9 


San Francisco 




IDG WORLD EXPO 




www.linuxworldexpo.com 




SHARE 


Aug. 12-17 


San Diego 




SHARE 




www.share.org 




Actuate International 


Aug. 13-15 


User Conference 




Las Vegas 




ACTUATE 




www1.event-projects.com/evo/AIUC2007 




Agile 2007 


Aug. 13-17 


Washington, D.C. 




AGILE ALLIANCE 




www.agile2007.com 




BEAWorld 


Sept. 10-12 


San Francisco 




BEA SOFTWARE 




www.bea.com/beaworld 




VMworld 2007 


Sept. 11-13 


San Francisco 




VMWARE 




www.vmware.com/vmworld 




VSLive 


Sept. 16-19 


New York 




1105 MEDIA 




www.ftponline.com/conferences/vslive 




Dreamforce 2007 


Sept. 16-19 


San Francisco 




SALESF0RCE.COM 




www.salesforce.com/dreamforce 




High Performance 


Sept. 17 


on Wall St. 




New York 




FLAGG MANAGEMENT 




www.highperformanceonwallstreet.com 




Intel Developer Forum 


Sept. 18-20 


San Francisco 




INTEL 




www.intel.com/idf 




SD Best Practices 


Sept. 18-21 


Boston 




CMP MEDIA 




www.sdexpo.com 




Software Test 


Oct. 2-4 


& Performance Conference 


Cambridge, Mass. 




BZ MEDIA 




www.stpcon.com 




EclipseWorld 


Nov. 6-8 


Reston, Va. 




BZ MEDIA 




www.eclipseworld.net 





For a more complete calendar of U.S. software 
development events, see www.bzmedia.com/calendar. 
Information is subject to change. Send news about 
upcoming events to events@bzmedia.com. 
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